IT Security Governance, Risk & Compliance Analyst

1 month ago
Full-time
Mid Level
Legal
JustMarkets

JustMarkets

JustMarkets is a leading online trading platform that offers a wide range of financial instruments including Forex, CFDs, Gold, and Oil. With low spreads, high leverage up to 1:3000, and fast execution, JustMarkets provides a next-level trading experie...

Capital Markets
1-10

Description

  • Collect, validate, organize, and maintain audit and security-control evidence.
  • Test assigned security controls, identify gaps, and prepare traceable evidence packages.
  • Support internal and external assurance activities, including SOC 2, DORA, and CySEC-related audits.
  • Maintain control records, findings, remediation actions, owners, deadlines, and evidence repositories.
  • Perform third-party security assessments, including supplier tiering, due diligence, questionnaire reviews, and assurance-evidence analysis.
  • Assess and track risks related to SaaS providers, ICT providers, outsourced services, and critical vendors.
  • Collaborate with Security, Procurement, Legal, technical teams, and business stakeholders.
  • Support security-awareness campaigns, onboarding, phishing simulations, and role-based training.
  • Prepare compliance and security-risk reports and escalate significant gaps, overdue actions, and supplier findings.

Requirements

  • Experience in IT compliance, Information Security GRC, IT risk, IT audit, third-party security risk, or a related field.
  • Hands-on experience collecting, validating, and maintaining audit and control evidence.
  • Understanding of security controls, control testing, gap identification, and remediation tracking.
  • Knowledge of SOC 2, ISO 27001, NIST, CIS Controls, or similar frameworks.
  • Understanding of risk assessment and risk treatment principles.
  • Strong attention to detail and ability to handle sensitive information.
  • Clear written and verbal communication skills with technical and non-technical stakeholders, including good English communication.
  • Experience with SOC 2, DORA, CySEC, or other financial-services regulations is preferred.
  • Experience with vendor security risk management and GRC platforms such as ServiceNow GRC, OneTrust, Archer, Vanta, Drata, or Hyperproof is preferred.
  • Relevant certifications such as CISA, CRISC, CISM, or ISO 27001 Lead Auditor/Implementer are preferred.

Benefits

  • Remote work opportunity.
  • 20 paid vacation days and 10 paid sick leave days annually.
  • Medical budget and wellness budget for gym, sports equipment, and related expenses.
  • Professional education budget and language learning budget.
  • Tax expense coverage and expert support for Ukrainian private entrepreneurs.
  • Paid public holidays according to the company holiday schedule.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Compliance & Sustainability Intelligence Manager (Emerging Programs)

rePurpose Global 51-250 Professional Services

rePurpose Global is hiring a Compliance & Sustainability Intelligence Manager to research evolving packaging EPR regulations, guide consumer brands through compliance, and shape the company’s regulatory intelligence and platform strategy.

5 hours, 40 minutes ago

IT Security & Compliance Lead (Amsterdam, NLD)

B Lab 51-250 Diversified Consumer Services

B Lab is seeking a full-time IT Security & Compliance Lead in Amsterdam to establish consistent security governance, compliance, and risk management across its consolidating global network.

Cybersecurity Penetration Testing Salesforce
4 days, 5 hours ago

IT Security & Compliance Lead (São Paulo, BR)

B Lab 51-250 Diversified Consumer Services

B Lab is seeking an IT Security & Compliance Lead in São Paulo to establish consistent security governance, compliance, risk management, and incident-response practices across its consolidating global nonprofit network.

Cybersecurity Penetration Testing Salesforce
4 days, 5 hours ago

Regulatory Affairs Specialist

MANSCAPED 51-250 Personal Products

MANSCAPED is seeking a Regulatory Affairs Specialist to support the Senior Manager, Regulatory by maintaining global compliance for its cosmetics, personal care, grooming, electrical, battery, accessory, and packaging products.

4 days, 6 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers