Senior Associate, Information Security(m/w/x)

Description

ISMS maintenance and audit readiness for a multi-asset investment platform. Proven experience in security-by-design governance and evidence management required. Stock option plan, 25 days work-from-anywhere policy.

Requirements

• •Proactive and ownership-driven mindset
• •Balance of rigor and pragmatism
• •Clear and persuasive writing skills
• •Constructive challenging and evidence improvement
• •Collaboration and calmness under pressure

Tasks

• •Own and maintain parts of the ISMS
• •Implement measurable security policies and standards
• •Support security-by-design governance for new initiatives
• •Plan and run audit readiness activities
• •Manage audit timelines and evidence plans
• •Coordinate stakeholders for internal and external audits
• •Review evidence for quality, completeness, and traceability
• •Challenge gaps and drive remediation with control owners
• •Draft responses to auditors and internal stakeholders
• •Maintain action plans and verify closure
• •Facilitate risk assessments for systems, projects, and vendors
• •Document risk outcomes and treatment plans
• •Maintain the quality of the risk register
• •Identify systemic themes and control weakness patterns
• •Propose improvements to reduce residual risk
• •Lead third-party risk management and due diligence reviews
• •Track vendor remediation commitments
• •Support security contractual requirements
• •Partner with Procurement and Legal on vendor security
• •Test control design and operating effectiveness
• •Document results and recommend control improvements
• •Produce GRC reporting and metrics for leadership
• •Report on audit status and risk trends
• •Improve GRC workflows through automation and tooling

Benefits