The Role
Plan and execute technical and targeted IT risk assessments across infrastructure, applications, and third parties. Maintain the risk register and remediation tracking, evaluate controls and mitigation strategies, prepare reports and metrics on security posture, and act as an escalation point for information security risks. Contribute to security projects and ensure compliance with relevant frameworks and regulations.
Summary Generated by Built In
The role:
Join our dynamic Information Security GRC team to play a crucial role in strengthening our business operations. As a key member, you'll enforce our Information Security Framework, conduct internal risk assessments, and collaborate your line manager to define assessment scopes. Your responsibilities will include: review internal systems, processes, and procedures, record risks, and prepare insightful reports. Additionally, you'll contribute to Information Security projects, ensuring state-of-the-art solutions in line with regulatory requirements and best practices. This is an opportunity to make a significant impact in a forward-thinking environment, safeguarding our business while driving innovation in Information Security. Join us for a fulfilling journey!
The main responsibilities of the position include:
- Plan and execute technical and targeted risk assessments in IT infrastructure, applications, technologies, and third parties
- Assess internal controls, processes, and policies related to Information Technology and Security, identify deficiencies, and develop remediation strategies
- Perform risk analysis on current risks and identify potential risks at operational, tactical, and strategic level
- Perform risk evaluation on previously handled risks and compare mitigation approaches to potential risks
- Maintain the risk register and the Information Security Risk Management Program
- Identify information security risks and make recommendations that are appropriate, practical, and cost-effective
- Manage and monitor the progress of remediation steps on risk assessment findings
- Prepare comprehensive reports summarising the actions taken for to remediate identified risks
- Provide regular reports and metrics on the security posture of the company
- Act as the escalation point of the information security department for any information security related risks
Main requirements:
- BSc/MSc in Information Security or any other relevant degree
- At least 3 years of work experience in information security risk management and information security risk assessment
- Technical knowledge of operations, physical, network, host and application security, as well as security architecture, virtualisation, and cloud infrastructures
- Good understanding of security regulations and frameworks, such as ISO 27005, ISO 27001, NIST CSF and 800-53, DORA, GDPR, etc
- Risk-related certifications, such as CRISC, CGRC, and CISSP, are a plus
- Ability to work autonomously with minimum supervision and to integrate well within a team
- Ability to articulate security risks and communicate effectively to various levels of management
- Self-motivated, proactive, and efficient
- Ability to work under pressure in a fast paced environment
- Strong interpersonal, organisational, and project management skills
- Excellent communication skills with the ability to explain technical concepts to a non-technical audience.
- Excellent written and verbal skills in English
Benefit from:
- Attractive remuneration package
- Private health insurance
- Corporate pension fund
- Intellectually stimulating work environment
- Continuous personal development and international training opportunities
The Hiring Experience: What Awaits You
- Let’s Connect – Intro Chat with Talent Acquisition
- Deep Dive – First Interview with Your Future Team
- Final Connection – Final Interview
All applications will be treated with strict confidentiality!
Skills Required
- BSc/MSc in Information Security or relevant degree
- At least 3 years of experience in information security risk management and risk assessment
- Technical knowledge of operations, physical, network, host and application security
- Knowledge of security architecture, virtualisation, and cloud infrastructures
- Good understanding of security regulations and frameworks (ISO 27005, ISO 27001, NIST CSF, NIST 800-53, DORA, GDPR)
- Risk-related certifications (CRISC, CGRC, CISSP)
- Ability to articulate security risks and communicate effectively to various levels of management
- Strong interpersonal, organisational, and project management skills
- Ability to work autonomously with minimum supervision and integrate within a team
- Excellent written and verbal English communication skills
- Ability to work under pressure in a fast-paced environment; self-motivated and proactive
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
XM is a trading platform trusted by over 20 million traders, offering easy access to 1400+ global assets with low spreads, exceptional conditions, and super-fast execution for Forex and CFD trading.
