(Senior) Information Risk and Security Manager*in
Core
Identify, analyze, and assess IT and information risks; advise departments on security specifications for new IT services, products, and platforms; ensure compliance with legal and corporate security requirements.
Role type
Senior Information Risk and Security Manager
Builds
Information Security Management Systems (ISMS) and security governance frameworks
Domain
Financial services / Asset Management / IT Security
Required skills
IT risk assessment, IT security process management, Security Management Frameworks (ITIL, ISO/IEC 27001), regulatory compliance (DORA, MaRisk, NIS 2, ISO27001), threat and risk analysis, vendor management, SOC/SIEM/Vulnerability Management oversight
Preferred skills
CISSP, CISM, TISP certifications
Technologies
SIEM, SOC tools, Vulnerability Management platforms
Responsibilities
Identify, analyze, and assess IT and information risks; Advise departments on security specifications for new IT services, products, and platforms; Contribute to the conception, implementation, monitoring, and improvement of an ISMS; Ensure compliance with legal and corporate security requirements and guidelines; Conduct proactive threat and risk analyses; Assist in risk treatment and document measures in risk management; Coordinate external service providers and partners, including regulatory outsourcing management; Oversee SOC, SIEM, and Vulnerability Management
Seniority
Senior, hands-on IC
