Комплаенс и риски вакансии - гибрид

Location: Melbourne, Victoria, Australia Workplace: hybrid We are a leading trading platform that is ambitiously expanding to the four corners of the globe. Our top-rated products have won prestigious industry awards for their cutting-edge technology and seamless client experience. We deliver only the best, so we are always in search of the best people to join our ever-growing talented team. Driving Capital.com ’s regulated expansion in Australia, you will embed practical, risk-based controls that keep our fast-moving business fully aligned with AFSL, ASIC and AML/CTF expectations. Acting as the operational bridge between front-line teams and regulators, you will ensure that compliance is not a hurdle but a competitive advantage for our OTC-derivatives offering. Responsibilities: Regulatory Advisory & Support: Serve as a  point of contact for policy, procedure and technical queries from operational teams. Onboarding Oversight: Review KYC/AML checks and verify wholesale-client categorisations to guarantee compliant client onboarding. Policy Governance: Maintain and continuously improve the Compliance Manual, policies and procedures in line with evolving ASIC and AUSTRAC requirements. Regulatory Engagement: Assist the Head of Compliance with  preparing and respond to ASIC, AUSTRAC and external-audit requests, ensuring timely and accurate submissions. Controls Testing & Risk Assessment: Assist with internal audits, control testing and risk assessments, highlighting gaps and driving remediation. Compliance Registers Management: Maintain and monitor registers for breaches, complaints, conflicts and incidents, escalating themes to leadership. Board & Committee Reporting: Compile clear, data-driven reports for the Compliance Committee, TMD Committee and Capital.com Board Requirements: Industry Experience : 2-4 years in compliance or regulatory roles within OTC derivatives, CFDs, FX or broader financial markets, ideally under an AFSL framework. Regulatory Expertise : Deep working knowledge of ASIC Regulatory Guides, the AML/CTF Act and derivative-reporting obligations, with the ability to interpret and apply them pragmatically. Operational Know-how : Hands-on familiarity with client-onboarding workflows, trading systems and compliance-monitoring tools; proven experience drafting policies, testing controls and producing board-level reports. Analytical Mindset : Detail-oriented and resilient under pressure, able to investigate issues and translate data into actionable improvements without losing pace. Communication & Stakeholder Management : Confident communicator who can influence internal teams and engage regulators or auditors in a high-pressure trading environment. Education & Credentials : Bachelor’s degree (finance, law or related) or near completion; additional compliance or AML certifications welcomed. Growth Mindset : Proactively identifies enhancements, champions high-quality outcomes and aligns with Capital.com ’s culture of innovation. Competitive Salary: We believe great work deserves great pay! Your skills and talents will be rewarded with a salary that makes you feel valued and motivated. Work-Life Harmony: Join a company that genuinely cares about you -because your life outside of work matters just as much as your time on the clock. Generous Time Off: Need a breather? Our annual leave policy lets you recharge and enjoy life outside of work without a worry. Employee Referral Program: Love working here? Share the love! Bring your talented friends on board and get rewarded for growing our awesome team. Comprehensive Health Benefits: We’ve got your back with a medical insurance plan. Plus, location-specific benefits and perks! Workation Wonderland: Live your digital nomad dreams with 30 extra days to work remotely from anywhere in the world (some restrictions apply). Adventure awaits! Volunteer Days: Make a difference! Take two additional paid days each year to support causes you care about and give back to the community. Be a key player at the forefront of the digital assets movement, propelling your career to new heights! Join a dynamic and rapidly expanding company that values and rewards talent, initiative, and creativity. Work alongside one of the most brilliant teams in the industry.

Role Description The Risk Manager - Platform Risk reports to the Senior Manager of Risk Management and IT Compliance team within Tech Risk Operations (TRO). This is a first-line of defense risk team responsible for Central Tech business unit risks & Security risks across the company. The Risk Manager - Platform Risk is a people manager role, focused on leading a team of individuals to enable consistent identification of technology-related risks for key Central Tech business unit technology platforms. These technology platforms enable the business to build and run in-house developed applications that support the core of our Business. The Risk Manager - Platform Risk possesses both a strong technical understanding of DevOps IT technology and expertise in various risk domains. These domains include cybersecurity, IT, privacy, regulatory compliance, broader enterprise risks, Trust & Safety, cybersecurity regulatory compliance, and e-commerce fraud. This role involves identifying technology-related risks across core DevOps technology platforms, encompassing both public cloud and on-premise infrastructure. This includes (but is not limited to) public and private cloud platforms, like AWS, GCP, Azure, Kubernetes, Gitlab, CI/CD Tooling, etc. This role also requires embedding secure software development principles and tooling (SAST, DAST, SCA) into BAU development practices, to apply them effectively to DevOps technology platforms. The Risk Manager - Platform Risk is also a subject matter expert leveraging a deep understanding of the enterprise risk discipline combining deep knowledge of theory and organizational practice or expertise across several different disciplines within a function. Effective first-line risk professionals are adaptable individuals who can engage with diverse senior technical stakeholders (Senior Engineering Managers, Product Owners, developers, etc.) This necessitates strong communication skills, technical proficiency, an ability to foster collaboration, incorporate different viewpoints, and steer efforts toward positive business results in managing IT risks and ensuring IT regulatory compliance obligations are met. This position requires strong stakeholder management skills and requires an individual who can convince others who are skeptical or unwilling to accept new concepts, practices and approaches. This position involves extensive collaboration with senior technical stakeholders to ensure the consistent maintenance of existing IT controls across the organization. Success in this role requires exceptional stakeholder management skills, including the ability to build strong relationships, effectively communicate complex information, and persuasively influence individuals and teams, even when faced with resistance to necessary changes and the adoption of new security protocols. The ability to navigate organizational complexities and foster a culture of IT risk management, security awareness and compliance is critical. This role is also a people manager position and is fully responsible for managing a team of individuals and continuously improving the area under their scope. This manager will be responsible for leading and managing a team of internal and/or external resources (e.g. Risk Analysts, Risk Officers, consultants). They are comfortable leading a team to come up with robust, scalable and automated solutions that mitigate key risks while enabling successful business operations across multiple core platforms. Key Responsibilities and Duties — Attract, engage, develop, and retain talent to their full potential by fostering a supportive work environment that emphasizes continuous feedback, coaching, and mentorship programs, ensuring comprehensive growth for all crafts. — Coaching your team on and consistently role model the Booking values on Think Customer First, Own It, Learn Forever, Succeed Together, and Do the Right Thing. — Drive initiatives effectively involving multiple technical first-line senior stakeholders, re-prioritising tasks when beneficial. — Formulate and implement tactical plans and objectives within Platform Risk Management that are in alignment with Central Tech business objectives and ensure the achievement of annual goals. — Establish team priorities, delegate projects, allocate resources, and provide regular communication to management and business partners regarding business performance and project progress. — Advise first-line stakeholders with specialized knowledge and expertise in IT risk, cybersecurity and regulatory compliance risk. — Assume responsibility for the identification of technological risks and the formulation of control design proposals. — Offer guidance on control design that is sustainable and appropriately scaled, ensuring that solutions are commensurate with the complexity of the issues addressed and avoiding unnecessary overengineering. — Drive business engagement in the Central Tech business unit to provide risk and compliance awareness for teams that have a clear need to manage risks without significantly affecting their development velocity and/or play a key role towards achieving strategic objectives in the company. — Develop and maintain IT and security policies and procedures for secure software development & collaborate with development teams to integrate secure software development practices and principles into CI/CD pipelines. — Support senior stakeholders across central tech helping to promote and embed risk and compliance ownership across the business as well as to broaden and expand their knowledge base of both the internal and external risk environment. — Follow broader ERM strategy defined by R&C and implement it into execution within the first-line of defense (business) and drive continuous improvement of risk assessment methodologies through ongoing collaboration with second-line risk and controls teams, ensuring alignment with practical business objectives. — Support the team to identify ways to increase their business impact and improve the team’s product(s) and ways of working. — Liaise with other risk and audit teams (Risk and Controls, Internal Audit, external auditors, etc.) to provide a more in-depth technical risk perspective, as needed. — Stay current with emerging cyber threats and security best practices in DevOps environments. Knowledge and Skills — Strong risk and control or audit/assurance background with a deep understanding of operational and technology risk - L4 — Strong working experience with IT General Controls (ITGCs), especially in fast-paced DevOps environments — Strong understanding of technology risk management, controls, and compliance, especially for public cloud platforms and DevOps Tooling - L4 — Experience and understanding of applicable regulations such as Sarbanes Oxley, PCI-DSS, GDPR and CCPA - L4 — Familiarity with industry-standard Cybersecurity regulatory frameworks such as NIST, ISO27001 and CIS - L3 — Understanding of cybersecurity risks and data protection principles - L3 — Technical AWS certifications (AWS Certified Solutions Architect, AWS Certified Security) are a plus — Knowledge of secure software development practices and tooling (SAST, DAST, and SCA tools) — Ability to cultivate solid relationships with business partners in order to drive the adoption of the risk management culture — Thorough technical understanding of internal control requirements and design and experience in applying them in various businesses — Able to split large tasks into logical, manageable and decoupled actions which are managed effectively and delivered on time — Be flexible and agile in response to the change in business, change in stakeholder expectations and/or change in regulatory/operating environment of B.com Level of Education: Bachelor/Master Years of relevant Job Knowledge: Extensive Knowledge (8 - 12 years) Benefits & Perks — Headquarters located in one of the most dynamic and cosmopolitan cities in Europe: Amsterdam. — Contribute to a high‑scale, sophisticated, world‑class product and see the real‑time impact of your work on millions of travelers worldwide. — Be part of a truly international fast‑paced environment and performance‑driven culture. — Full relocation support for you and your family to move to Amsterdam. — We have fine‑tuned this process by successfully relocating hundreds of Technology professionals to Amsterdam in recent years. — Performance‑based company that offers 29 vacation days, career advancement, and lucrative compensation, including bonuses and stock potential. — Discount on Booking.com accommodations with the “Booking Deal” including other perks and benefits. — Company‑sponsored family and social activities to help our employees become integrated with each other and Dutch culture. — Diverse and creative colleagues from every corner of the world. — Health, life, and disability insurance*. — Annual paid time off and generous paid leave scheme including: parent, grandparent, bereavement, and care leave. — Hybrid working including flexible working arrangements, and up to 20 days per year working from abroad (home country). — Industry‑leading product discounts for yourself, friends, and family, including automatic Genius Level 3 status and quarterly Booking.com wallet credit. — Free access to online learning platforms, development and mentorship programs, and a complimentary Headspace membership. — On‑site meals, coffee, and snacks, including healthy and vegan options, daily*. — Benefits may vary slightly depending on location and contract type.

Location: Dubai Workplace: hybrid About the role: IT  Compliance sits at the intersection of technology, regulation, and business — translating regulatory obligations into controls that work in a fast-moving fintech environment. This role owns IT audit readiness, gap assessments, and day-to-day IT Compliance work. Responsibilities: Take ownership of preparation and coordination of IT audits, supervisory reviews, and regulatory information requests, ensuring timely, accurate, and complete delivery of required evidence. Conduct IT compliance and control gap assessments against local regulatory requirements, internal policies, and recognized industry best practices. Identify compliance gaps, control weaknesses, and technology risks; define, execute, and track remediation and corrective action plans in collaboration with IT, Security, Risk, and Compliance teams. Support the development, implementation, and ongoing maintenance of IT, cybersecurity, and information security policies, standards, and procedures aligned with regulatory expectations. Act as a subject-matter expert on IT compliance and technology risk requirements, translating regulatory and supervisory expectations into practical, implementable controls. Maintain accurate, complete, and audit-ready documentation for all IT compliance activities, including policies, procedures, risk assessments, and evidence repositories. Support ongoing interactions with regulators and external auditors on technology, cybersecurity, and operational resilience topics. Requirements: 4–6+ years of experience in IT compliance, IT audit, technology risk management, or related fields within regulated environments. Strong understanding of regulatory expectations applicable to financial institutions in the UAE, particularly in the areas of: IT governance and oversight, Information security and cybersecurity controls, Technology risk management, Data protection and data residency, Access management, change management, and incident management, Business continuity and disaster recovery (BCP / DR). Proven hands-on experience conducting IT and cybersecurity gap assessments and defining remediation plans aligned with regulatory and supervisory expectations. Solid knowledge of internationally recognized IT and security frameworks (e.g. ISO 27001, NIST, COBIT) and ability to apply them in a regulatory context. Experience supporting regulatory inspections, supervisory reviews, or external IT audits, including evidence preparation and issue remediation. Ability to work independently on complex compliance topics, manage multiple priorities, and drive remediation activities to completion. Strong communication and stakeholder management skills, with the ability to clearly explain technical and regulatory requirements to non-technical audiences. Fluent English is required; Strong analytical and risk-based mindset with high attention to detail. What you will get in return: Competitive Salary: We believe great work deserves great pay! Your skills and talents will be rewarded with a salary that makes you feel valued and motivated. Work-Life Harmony: Join a company that genuinely cares about you - because your life outside of work matters just as much as your time on the clock. #LI-Hybrid Annual Performance Bonus: Your hard work doesn’t go unnoticed! Celebrate your achievements with a well-deserved annual bonus tied to your performance. Generous Time Off: Need a breather? Our annual leave policy lets you recharge and enjoy life outside of work without a worry. Employee Referral Program: Love working here? Share the love! Bring your talented friends on board and get rewarded for growing our awesome team. Comprehensive Health & Pension Benefits: From medical insurance to pension plans, we’ve got your back. Plus, location-specific benefits and perks! Workation Wonderland: Live your digital nomad dreams with 30 extra days to work remotely from anywhere in the world (some restrictions apply). Adventure awaits! Volunteer Days: Make a difference! Take two additional paid days each year to support causes you care about and give back to the community. Be a key player at the forefront of the digital assets movement, propelling your career to new heights! Join a dynamic and rapidly expanding company that values and rewards talent, initiative, and creativity. Work alongside one of the most brilliant teams in the industry.

Location: London, England, United Kingdom Workplace: hybrid We are a leading trading platform that is ambitiously expanding to the four corners of the globe. Our top-rated products have won prestigious industry awards for their cutting-edge technology and seamless client experience. We deliver only the best, so we are always in search of the best people to join our ever-growing talented team. The Head of Risk will be the accountable risk leader for the UK entity, responsible for ensuring that all material risks affecting UK clients, regulatory posture, and operational resilience are identified, assessed, monitored, and reported effectively. This is a broad role covering financial risk (excluding direct dealing oversight), operational risk, conduct risk, and third party/outsourcing risk. A defining characteristic of this role is its operating model. Many core risk functions are delivered by the Group Risk team on an outsourced or shared services basis. The Head of Risk does not need to build and staff every capability locally. Instead, they must be skilled at managing outsourced service delivery: defining what the UK entity requires, holding Group Risk accountable for quality and timeliness, identifying gaps or conflicts between Group delivery and UK regulatory obligations, and escalating where service levels or outputs fall short. This creates a dual mandate. The role holder must be a credible, senior risk professional who can engage substantively with risk content (frameworks, stress tests, MI, regulatory submissions). They must also be an effective governance operator who can manage intra group outsourcing relationships with the same rigour the FCA would expect for any outsourced critical or important function. The role reports directly to the UK CEO with a functional dotted line to the Group CRO. The Head of Risk will be the primary risk voice in UK governance forums and the lead point of contact for FCA supervisory engagement on risk matters. Responsibilities UK Risk Accountability and Framework Ownership Own the UK enterprise risk management framework end to end, ensuring it is proportionate, current, and aligned with FCA expectations under SYSC, PRIN, and Consumer Duty Maintain the UK Risk Register with clear ownership, assessment methodology, defined review cycles, and escalation triggers Own the UK risk management framework and RAS, translating Group risk appetite into UK specific decision boundaries that reflect local regulatory constraintsProvide independent 2nd line oversight and challenge to 1st line risk owners across operations, technology, client services, and commercial functions (excluding dealing, which reports separately) Outsourced Risk Service Management Act as the intelligent client for risk services delivered by the Group Risk team, including but not limited to: market risk monitoring, credit/counterparty risk assessment, quantitative risk modelling, stress testing, and risk MI production Define and document what the UK entity requires from Group Risk in terms of scope, quality, timeliness, and regulatory standard, formalised through an intra group service level framework or equivalent Monitor and challenge the quality and completeness of Group Risk outputs before they are used in UK governance forums, board packs, or regulatory submissions Identify gaps between Group Risk delivery and UK specific regulatory requirements, and escalate where those gaps create risk to the UK entity’s compliance posture Maintain an outsourcing risk assessment for Group Risk services consistent with FCA expectations for oversight of outsourced critical or important functions under SYSC 8 Ensure that the UK entity retains sufficient knowledge and capability locally to oversee outsourced risk functions, avoiding inappropriate dependency on Group without independent local scrutiny Regulatory, Prudential, and Conduct Risk Lead or substantively oversee the UK ICARA (Internal Capital Adequacy and Risk Assessment) process, coordinating with Group Risk and Group Finance on stress testing, scenario analysis, and capital/liquidity adequacy Ensure market risk, credit/counterparty risk, and concentration risk are monitored and reported to a standard that meets MIFIDPRU requirements, whether produced locally or by Group Integrate conduct risk assessment into product governance, pricing decisions, and client outcome monitoring in line with Consumer Duty (PRIN 2A) Oversee operational risk including business continuity, IT resilience, and third party risk, ensuring the UK entity maintains visibility even where platforms and infrastructure are managed at Group level Reporting and Management Information Deliver risk MI to the UK Board, UK ExCo, and relevant governance committees on a defined cadence, with clear narrative on trends, near breaches, breaches, and required actions Own and maintain Key Risk Indicators (KRIs) across all material risk domains, each with predefined thresholds and mandatory escalation actionsPrepare risk sections for board packs, regulatory returns, and FCA supervisory engagement materials Critically assess risk MI received from Group Risk before presenting to UK governance forums, ensuring it accurately reflects UK specific exposures and is not simply a Group level aggregation Stakeholder Engagement Act as the primary point of contact for risk matters with the FCA during supervisory interactions, skilled persons reviews, and thematic exercises Maintain effective working relationships with the Group CRO and Group Risk team, balancing collaborative alignment with independent challenge where UK interests diverge from Group priorities Collaborate with the Head of Compliance (SMF16/17) to ensure clear delineation of 2nd line responsibilities with no gaps or duplication Engage with internal and external auditors on risk related findings, ensuring timely remediation and structural fixes Team and Capability Building Build the UK risk function progressively as the office grows, identifying where local capability is needed versus where Group delivery remains appropriate Embed a risk aware culture across the UK office through training, practical challenge, and visible engagement with 1st line teams Requirements Substantial experience (typically 8+ years) in risk management within FCA regulated financial services, with demonstrable exposure to CFD, spread betting, or leveraged derivatives businesses Deep working knowledge of FCA regulatory expectations for risk management under SYSC, PRIN, Consumer Duty (PRIN 2A), and MIFIDPRU prudential requirements Proven experience managing outsourced or shared service risk functions, including defining service requirements, monitoring delivery quality, and escalating shortfalls. This is a critical differentiator for this role Experience designing and operating enterprise risk frameworks including risk registers, risk appetite statements, KRI frameworks, and ICARA/ICAAP processes Strong understanding of financial risk (market, credit/counterparty, liquidity), operational risk, and conduct risk in the context of a retail leveraged trading platform Experience preparing and critically reviewing risk MI for boards and senior governance forums, including the ability to identify where MI masks underlying issues Experience engaging with the FCA in a supervisory context, whether directly or as a substantive contributor to supervisory dialogue Understanding of the 3 lines of defence model and comfort operating independently within a structure where many 2nd line services are delivered centrally by a Group function Strong governance instincts: the ability to distinguish between aligned Group support and inappropriate delegation of UK regulatory accountability Desirable Experience with FCA expectations for oversight of outsourced critical or important functions under SYSC 8 and the FCA’s broader outsourcing and third party risk guidance (FG16/5) Experience with CASS client money and asset requirements, particularly CASS 7 and CASS 6 audit processes Familiarity with the Complaints, Claims, and Indemnity (CCI) regime under PS25/20 Professional qualifications: IRM Certificate/Diploma, FRM, PRM, or equivalent Experience within a multi entity group structure where local regulatory obligations must be balanced against Group efficiency and standardisation pressures Proficiency with risk analytics tools including Python/R for quantitative analysis and Tableau for risk dashboards What you will get in return: • Competitive Salary: We believe great work deserves great pay! Your skills and talents will be rewarded with a salary that makes you feel valued and motivated. • Work-Life Harmony: Join a company that genuinely cares about you - because your life outside of work matters just as much as your time on the clock. #LI-Hybrid • Generous Time Off: Need a breather? Our annual leave policy lets you recharge and enjoy life outside of work without a worry. • Employee Referral Program: Love working here? Share the love! Bring your talented friends on board and get rewarded for growing our awesome team. • Comprehensive Health & Pension Benefits: From medical insurance to pension plans, we’ve got your back. Plus, location-specific benefits and perks! • Workation Wonderland: Live your digital nomad dreams with 30 extra days to work remotely from anywhere in the world (some restrictions apply). Adventure awaits! • Volunteer Days: Make a difference! Take two additional paid days each year to support causes you care about and give back to the community. Be a key player at the forefront of the digital assets movement, propelling your career to new heights! Join a dynamic and rapidly expanding company that values and rewards talent, initiative, and creativity. Work alongside one of the most brilliant teams in the industry.

Location: Warsaw, Mazowieckie, Poland; Limassol, Cyprus; Sofia City, Bulgaria Workplace: hybrid IT Assurance & Compliance sits at the intersection of technology, regulation, and business — translating regulatory obligations into controls that work in a fast-moving fintech environment. This role owns IT audit readiness, gap assessments, and day-to-day IT Assurance & Compliance work. Responsibilities: Own end-to-end preparation for IT audits and regulatory reviews — evidence gathering, coordination with tech teams, and timely delivery of complete audit packages; Conduct gap assessments against new regulatory requirements — document findings and propose remediation plans with clear owners and deadlines; Act as the subject-matter expert for IT compliance questions across the Company — translate regulatory requirements into practical implementation guidance for technical teams; Maintain audit-ready documentation across all IT Assurance & Compliance activities, including evidence repositories and compliance registers; Review and contribute to IT and Security policies, standards, and procedures — providing IT compliance input to ensure alignment with regulatory requirements and practical applicability across teams. Requirements: 4+ years in IT compliance, IT audit, or information security governance; Experience in FinTech, banking, or another regulated industry; Hands-on experience conducting gap assessments and building remediation plans — not just documenting findings, but driving them to closure; Working knowledge of at least two of: DORA, PCI DSS, SOC 2, or similar frameworks; awareness of how they interact in a multi-jurisdiction environment is a plus; Ability to work independently on complex, ambiguous IT compliance tasks; Strong communication skills — able to translate regulatory requirements into practical terms for technical teams and present compliance positions clearly to regulators and senior stakeholders; Attention to detail that extends to documentation: evidence packages, policy versions, control registers. What you will get in return: Competitive Salary: We believe great work deserves great pay! Your skills and talents will be rewarded with a salary that makes you feel valued and motivated. Work-Life Harmony: Join a company that genuinely cares about you - because your life outside of work matters just as much as your time on the clock. #LI-Hybrid Annual Performance Bonus: Your hard work doesn’t go unnoticed! Celebrate your achievements with a well-deserved annual bonus tied to your performance. Generous Time Off: Need a breather? Our annual leave policy lets you recharge and enjoy life outside of work without a worry. Employee Referral Program: Love working here? Share the love! Bring your talented friends on board and get rewarded for growing our awesome team. Comprehensive Health & Pension Benefits: From medical insurance to pension plans, we’ve got your back. Plus, location-specific benefits and perks! Workation Wonderland: Live your digital nomad dreams with 30 extra days to work remotely from anywhere in the world (some restrictions apply). Adventure awaits! Volunteer Days: Make a difference! Take two additional paid days each year to support causes you care about and give back to the community. Be a key player at the forefront of the digital assets movement, propelling your career to new heights! Join a dynamic and rapidly expanding company that values and rewards talent, initiative, and creativity. Work alongside one of the most brilliant teams in the industry.

Location: Limassol; Nicosia Workplace: hybrid The role:    Join our dynamic Information Security GRC team to play a crucial role in strengthening our business operations. As a key member, you'll enforce our Information Security Framework, conduct internal risk assessments, and collaborate your line manager to define assessment scopes. Your responsibilities will include: review internal systems, processes, and procedures, record risks, and prepare insightful reports. Additionally, you'll contribute to Information Security projects, ensuring state-of-the-art solutions in line with regulatory requirements and best practices. This is an opportunity to make a significant impact in a forward-thinking environment, safeguarding our business while driving innovation in Information Security. Join us for a fulfilling journey! The main responsibilities of the position include: Plan and execute technical and targeted risk assessments in IT infrastructure, applications, technologies, and third parties Assess internal controls, processes, and policies related to Information Technology and Security, identify deficiencies, and develop remediation strategies Perform risk analysis on current risks and identify potential risks at operational, tactical, and strategic level Perform risk evaluation on previously handled risks and compare mitigation approaches to potential risks Maintain the risk register and the Information Security Risk Management Program Identify information security risks and make recommendations that are appropriate, practical, and cost-effective Manage and monitor the progress of remediation steps on risk assessment findings Prepare comprehensive reports summarising the actions taken for to remediate identified risks Provide regular reports and metrics on the security posture of the company Act as the escalation point of the information security department for any information security related risks Main requirements: BSc/MSc in Information Security or any other relevant degree At least 3 years of work experience in information security risk management and information security risk assessment Technical knowledge of operations, physical, network, host and application security, as well as security architecture, virtualisation, and cloud infrastructures Good understanding of security regulations and frameworks, such as ISO 27005, ISO 27001, NIST CSF and 800-53, DORA, GDPR, etc Risk-related certifications, such as CRISC, CGRC, and CISSP, are a plus Ability to work autonomously with minimum supervision and to integrate well within a team Ability to articulate security risks and communicate effectively to various levels of management Self-motivated, proactive, and efficient Ability to work under pressure in a fast paced environment Strong interpersonal, organisational, and project management skills Excellent communication skills with the ability to explain technical concepts to a non-technical audience. Excellent written and verbal skills in English Benefit from: Attractive remuneration package Private health insurance Corporate pension fund Intellectually stimulating work environment Continuous personal development and international training opportunities The Hiring Experience: What Awaits You Let’s Connect – Intro Chat with Talent Acquisition Deep Dive – First Interview with Your Future Team Final Connection – Final Interview All applications will be treated with strict confidentiality!   By submitting this application, I confirm that I have read and agree to the terms of the Privacy Policy and the Confidentiality Undertaking.