Information Security Governance, Risk & Compliance Manager

1 month ago
Full-time
Lead
Legal
JustMarkets

JustMarkets

JustMarkets is a leading online trading platform that offers a wide range of financial instruments including Forex, CFDs, Gold, and Oil. With low spreads, high leverage up to 1:3000, and fast execution, JustMarkets provides a next-level trading experie...

Capital Markets
1-10

Description

  • Own the Information Security GRC strategy, roadmap, operating model, and governance cadence.
  • Lead security governance, regulatory assurance, cyber risk, third-party risk, policy management, and security awareness oversight.
  • Establish ownership for controls, risks, exceptions, evidence, and remediation actions.
  • Coordinate SOC 2, DORA/CySEC-related assurance, internal and external audits, and regulatory requests.
  • Maintain cyber-risk and exception registers, ensuring risks are treated, accepted, or escalated.
  • Lead ICT supplier security tiering, due diligence, reassessments, and high-risk supplier decisions.
  • Develop practical security policies, standards, controls, and guidance.
  • Track control gaps, audit findings, and remediation commitments, escalating material risks.
  • Partner with technical, business, legal, and executive stakeholders on control design and risk-based decisions.
  • Build and manage the GRC team while improving efficiency through automation, reusable evidence, data quality, and AI-assisted workflows.

Requirements

  • Practical experience in Information Security GRC, cyber or technology risk, security compliance, or assurance.
  • Hands-on experience with SOC 2, ISO 27001, DORA, PCI DSS, NIST CSF, COBIT, or similar frameworks.
  • Experience establishing or operating security controls, risk registers, exception processes, and assurance programs.
  • Strong understanding of control design, operating effectiveness, evidence quality, findings, and remediation.
  • Experience coordinating internal or external audits and regulatory or assurance activities.
  • Experience with cyber-risk assessment, risk treatment, risk acceptance, and escalation.
  • Understanding of third-party and ICT supplier security risk.
  • Ability to translate regulatory and security requirements into practical controls and processes.
  • Strong stakeholder management skills across technical, business, and executive audiences.
  • Technical understanding of cloud, infrastructure, identity, IT operations, and product development.
  • Experience leading a team, function, program, or complex cross-functional initiatives.
  • Strong ownership, prioritization, and decision-making skills.

Benefits

  • 20 paid vacation days per year.
  • 10 paid sick leave days per year.
  • Public holidays according to company policy.
  • Medical budget.
  • Remote work opportunity.
  • Professional education budget.
  • Language learning budget.
  • Wellness budget for gym memberships, sports equipment, and similar activities.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Compliance & Sustainability Intelligence Manager (Emerging Programs)

rePurpose Global 51-250 Professional Services

rePurpose Global is hiring a Compliance & Sustainability Intelligence Manager to research evolving packaging EPR regulations, guide consumer brands through compliance, and shape the company’s regulatory intelligence and platform strategy.

5 hours, 40 minutes ago

IT Security & Compliance Lead (Amsterdam, NLD)

B Lab 51-250 Diversified Consumer Services

B Lab is seeking a full-time IT Security & Compliance Lead in Amsterdam to establish consistent security governance, compliance, and risk management across its consolidating global network.

Cybersecurity Penetration Testing Salesforce
4 days, 5 hours ago

IT Security & Compliance Lead (São Paulo, BR)

B Lab 51-250 Diversified Consumer Services

B Lab is seeking an IT Security & Compliance Lead in São Paulo to establish consistent security governance, compliance, risk management, and incident-response practices across its consolidating global nonprofit network.

Cybersecurity Penetration Testing Salesforce
4 days, 5 hours ago

Regulatory Affairs Specialist

MANSCAPED 51-250 Personal Products

MANSCAPED is seeking a Regulatory Affairs Specialist to support the Senior Manager, Regulatory by maintaining global compliance for its cosmetics, personal care, grooming, electrical, battery, accessory, and packaging products.

4 days, 6 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers