I

Innocap

Structures and operates allocations for institutions

Senior Associate - Cybersecurity

Security Operations & Incident Response +1Posted on Nov 10
Full-timeWrocław, PolandNo salary listed

About the Job

Requirements

  • At least 5 years of cybersecurity experience, ideally covering both security operations and governance, risk, and compliance.
  • Hands-on experience with Microsoft Sentinel, including KQL, Defender XDR, Entra ID, Conditional Access, Privileged Identity Management, Intune, and Purview.
  • Experience working with or overseeing a managed security service provider or Security Operations Centre.
  • Experience managing vulnerability remediation, including CVE prioritization and cloud security posture findings, ideally in Microsoft Azure.
  • Familiarity with application security testing tools, including SAST, DAST, and software composition analysis, and experience working with DevOps teams to remediate findings.
  • Experience supporting SOC 2, ISO/IEC 27001, or similar audits, including evidence collection and control testing.
  • Working knowledge of DORA and GDPR, including ICT security and incident reporting.
  • A relevant certification such as Microsoft SC-200/AZ-500, CompTIA Security+ or CySA+, or ISC2 SSCP/CISSP.
  • Strong organization and follow-through, and the ability to get other teams to act without direct authority.
  • Clear written communication, including preparing management reports and plain-language answers to employee questions.
  • Fluent English.

Responsibilities

  • Serve as the day-to-day internal partner to the 24x7 managed security service provider.
  • Act as the first internal responder to security escalations during European hours and contain routine incidents using approved playbooks.
  • Verify remediation of vulnerabilities detected by the managed security service provider through CVE detection and cloud security posture management.
  • Monitor security findings assigned to IT Operations and development teams and track them through closure.
  • Oversee application code scanning run by DevOps teams using SAST and DAST tools, ensuring scans occur and findings are fixed.
  • Run access reviews across the Microsoft Entra ID environment.
  • Lead evidence collection for SOC 1 and SOC 2 Type II audits.
  • Prepare cybersecurity reports, including ICT security and incident reporting under DORA.
  • Help answer client due-diligence questionnaires.
  • Serve as a contact for colleagues’ cybersecurity questions.

Desired Qualifications

  • Polish language skills.
  • Financial services or other regulated-industry experience.
  • ISO/IEC 27001 Lead Implementer or Lead Auditor certification.

About the Company

Innocap

Structures and operates allocations for institutions

Innocap runs a managed account platform for asset owners, structuring internal and external allocations for large institutions with risk, legal, compliance, and operational services plus IT capabilities to enable multi-jurisdiction access to many asset classes. It uses dedicated in-house teams and data-driven technology to design customized frameworks and partnerships with clients, delivering end-to-end governance, operations, and compliance. It differentiates itself through its lineage as the former internal platform of a major Canadian bank and as an independent, globally serving firm backed by a large pension fund and a top-tier bank, plus a focus on trusted people–client partnerships and an open architecture across jurisdictions. Its goal is to empower asset owners to create value for society by providing trusted, scalable infrastructure and expertise to manage large, complex mandates.

Company size
501-1,000
Company stage
Not listed
Total funding
Not listed
Headquarters
Montreal, Canada
Founded
1996

Recently Posted Jobs

Explore more opportunities at Innocap

See more jobs