XM

Global forex and CFD broker

Information Security Risk Officer

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours

Full-timeNo salary listedHybrid

About the Job

Requirements

A Bachelor of Science or Master of Science degree in Information Security or another relevant field.
At least 3 years of work experience in information security risk management and information security risk assessment.
Technical knowledge of operations, physical, network, host, and application security, as well as security architecture, virtualisation, and cloud infrastructures.
A good understanding of security regulations and frameworks, including ISO 27005, ISO 27001, NIST CSF and 800-53, DORA, and GDPR.
Ability to work autonomously with minimum supervision and integrate well within a team.
Ability to articulate security risks and communicate effectively to various levels of management.
Ability to work under pressure in a fast-paced environment.
Strong interpersonal, organisational, and project management skills.
Excellent communication skills, including the ability to explain technical concepts to a non-technical audience.
Excellent written and verbal skills in English.

Responsibilities

Plan and execute technical and targeted risk assessments in IT infrastructure, applications, technologies, and third parties.
Assess internal controls, processes, and policies related to Information Technology and Security, identify deficiencies, and develop remediation strategies.
Perform risk analysis on current risks and identify potential risks at operational, tactical, and strategic levels.
Evaluate previously handled risks and compare mitigation approaches to potential risks.
Maintain the risk register and the Information Security Risk Management Program.
Identify information security risks and make appropriate, practical, and cost-effective recommendations.
Manage and monitor remediation progress for risk assessment findings.
Prepare comprehensive reports summarising actions taken to remediate identified risks.
Provide regular reports and metrics on the company's security posture.
Act as the information security department's escalation point for information security-related risks.
Enforce the Information Security Framework, conduct internal risk assessments, collaborate with the line manager to define assessment scopes, review internal systems, processes, and procedures, record risks, prepare reports, and contribute to Information Security projects aligned with regulatory requirements and best practices.

Desired Qualifications

Risk-related certifications such as CRISC, CGRC, and CISSP are a plus.

The role:

Join our dynamic Information Security GRC team to play a crucial role in strengthening our business operations. As a key member, you'll enforce our Information Security Framework, conduct internal risk assessments, and collaborate your line manager to define assessment scopes. Your responsibilities will include: review internal systems, processes, and procedures, record risks, and prepare insightful reports. Additionally, you'll contribute to Information Security projects, ensuring state-of-the-art solutions in line with regulatory requirements and best practices. This is an opportunity to make a significant impact in a forward-thinking environment, safeguarding our business while driving innovation in Information Security. Join us for a fulfilling journey!

The main responsibilities of the position include:

Plan and execute technical and targeted risk assessments in IT infrastructure, applications, technologies, and third parties
Assess internal controls, processes, and policies related to Information Technology and Security, identify deficiencies, and develop remediation strategies
Perform risk analysis on current risks and identify potential risks at operational, tactical, and strategic level
Perform risk evaluation on previously handled risks and compare mitigation approaches to potential risks
Maintain the risk register and the Information Security Risk Management Program
Identify information security risks and make recommendations that are appropriate, practical, and cost-effective
Manage and monitor the progress of remediation steps on risk assessment findings
Prepare comprehensive reports summarising the actions taken for to remediate identified risks
Provide regular reports and metrics on the security posture of the company
Act as the escalation point of the information security department for any information security related risks

Main requirements:

BSc/MSc in Information Security or any other relevant degree
At least 3 years of work experience in information security risk management and information security risk assessment
Technical knowledge of operations, physical, network, host and application security, as well as security architecture, virtualisation, and cloud infrastructures
Good understanding of security regulations and frameworks, such as ISO 27005, ISO 27001, NIST CSF and 800-53, DORA, GDPR, etc
Risk-related certifications, such as CRISC, CGRC, and CISSP, are a plus
Ability to work autonomously with minimum supervision and to integrate well within a team
Ability to articulate security risks and communicate effectively to various levels of management
Self-motivated, proactive, and efficient
Ability to work under pressure in a fast paced environment
Strong interpersonal, organisational, and project management skills
Excellent communication skills with the ability to explain technical concepts to a non-technical audience.
Excellent written and verbal skills in English

Benefit from:

Attractive remuneration package
Private health insurance
Corporate pension fund
Intellectually stimulating work environment
Continuous personal development and international training opportunities

The Hiring Experience: What Awaits You

Let’s Connect – Intro Chat with Talent Acquisition
Deep Dive – First Interview with Your Future Team
Final Connection – Final Interview

All applications will be treated with strict confidentiality!

By submitting this application, I confirm that I have read and agree to the terms of the Privacy and Data Protection Notice and the Confidentiality Undertaking.

About the Company

XM

Global forex and CFD broker

XM is a forex and CFD broker that helps people trade currencies and other financial instruments online. It operates a trading platform where clients can buy and sell currencies and CFDs through account holders in multiple languages. The product works through a global team and offices; clients access markets via XM’s platform and tools, with support and services offered in over 30 languages. XM differentiates itself by its culture and people-focused approach: a large workforce (over 1,700 professionals across seven offices) and an emphasis on its values Big. Fair. Human., with programs for learning, wellbeing, diversity and inclusion, and flexible work arrangements. The company aims to be a leading global fintech provider by delivering reliable service, ongoing development for users and staff, and a strong focus on customer and employee wellbeing.

Company size: 1,001-5,000
Company stage: Not listed
Total funding: Not listed
Headquarters: Limassol Municipality, Cyprus
Founded: 2009

Recently Posted Jobs

Explore more opportunities at XM

See more jobs