Information Security Controls Manager

ZipRecruiter; London; Hybrid; GBP 60,000 - 90,000; Full time

Job summary

A prominent financial services company seeks an Information Security Controls Manager in London. The role involves maintaining the information security controls framework, collaborating across teams, and ensuring compliance with cyber regulations. Ideal candidates will have substantial experience in Information Security and a strong background in regulatory assessments, as well as excellent problem-solving and communication skills.

Benefits

Competitive salary and annual bonus

401(k) retirement plan with company match

Health and wellness benefits

Paid time off and generous parental leave

Daily lunch allowance

Education reimbursement

Modern office environment

Qualifications

• 3+ years of experience responding to client due diligence questionnaires.
• 5+ years of experience in Information Security.
• Familiarity with security frameworks and regulations.

Responsibilities

• Establish and maintain a formal information security controls catalog.
• Manage and enhance metrics on information security control performance.
• Deliver and enhance processes for managing security-related assessments.

Skills

Client Due Diligence

Information Security

GRC Tooling

NIST Cybersecurity Framework

Cybersecurity Regulations

Analytical Skills

Communication Skills

Problem Solving

Organizational Skills

Education

Bachelor's degree in Information Security

Computer Science

Information Technology

Job description

Job DescriptionJob Description

Company Overview

Interactive Brokers Group, Inc. (Nasdaq: IBKR) is a global financial services company headquartered in Greenwich, CT, USA, with offices in over 15 countries. We have been at the forefront of financial innovation for over four decades, known for our cutting-edge technology and client commitment.

IBKR affiliates provide global electronic brokerage services around the clock on stocks, options, futures, currencies, bonds, and funds to clients in over 200 countries and territories. We serve individual investors and institutions, including financial advisors, hedge funds and introducing brokers. Our advanced technology, competitive pricing, and global market help our clients to make the most of their investments.

Barron's has recognized Interactive Brokers as the #1 online broker for six consecutive years. Join our dynamic, multi- team and be a part of a company that simplifies and enhances financial opportunities using state-of-the-art technology.

This is a hybrid role (3 days in the office/2 days remote).

About your team:

The Information Security Controls Manager works with technology, risk management, and technical cybersecurity teams to measure and drive IBKR's security performance and develop and maintain client and regulatory trust.

This role is responsible for maintaining IBKR's formal information security controls framework and representing IBKR's cybersecurity controls to Information Security stakeholders outside and within the company, including audit, operational risk management, clients, and regulators.

What will be your responsibilities within IBKR:

• Establish and maintain a formal information security controls catalog based on existing security control processes informed by regulatory requirements.
• Formalize IBKR's information security controls testing framework, ensure it aligns with the Firm's cybersecurity risk management framework, and map it to common industry frameworks, such as NIST CSF.
• Establish and continually improve processes to test information security controls, including through the use of automation.
• Manage and enhance quantitative and qualitative metrics that report on key information security control performance and risk.
• Continually deliver and enhance IBKR's information security process for managing responses to security-related external assessments, audits, and examinations from clients, regulators, auditors, and other stakeholders.
• Maintain standard shared assessment questionnaires that describe IBKR's cybersecurity program.
• Evaluate security controls, identify opportunities for improvement, and communicate specific, constructive recommendations that move IBKR's information security program forward.
• Other duties, as assigned.

Which skills are required:

• 3+ years of experience responding to client due diligence questionnaires, audit requests, and regulatory exam requests.
• 5+ years of experience in Information Security.
• Prior experience working with GRC tooling, with automation and continuous compliance a plus.
• A working familiarity with common security frameworks and standards, including the NIST Cybersecurity Framework (CSF).
• Knowledge of cybersecurity regulations, including DORA and guidance issued by MAS, SFC, CFTC, FINRA and other regulators.
• Prior experience as a security risk assessor is a plus.
• Experience in utilizing industry-accepted practices to meet regulatory expectations.
• Proven track record of delivering results while collaborating with colleagues outside of the security team.
• Experience building a cross-functional team as an individual contributor.
• Familiarity with spreadsheets, including advanced functionality.
• An open, collaborative, client-centric, problem-solving mentality.
• Superior verbal and written communication skills.
• Superior critical thinking, analytical, and organizational abilities.
• Ability to exercise good judgment when solving problems with incomplete information.
• Bachelor's degree in Information Security, Computer Science, Information Technology or a related field.

To be successful in this position, you will have the following:

• Self-motivated and able to handle tasks with minimal supervision.
• Superb analytical and problem-solving skills.
• Excellent collaboration and communication (Verbal and written) skills.
• Outstanding organizational and time management skills.

Company Benefits & Perks

• Competitive salary, annual performance-based bonus and stock grant
• Retirement plan 401(k) with a competitive company match
• Excellent health and wellness benefits, including medical, dental, and vision benefits, and a company-paid medical healthcare premium.
• Wellness screenings and assessments, health coaches and counseling services through an Employee Assistance Program (EAP)
• Paid time off and a generous parental leave policy
• Daily company lunch allowance provided, and a fully stocked kitchen with healthy options for breakfast and snack
• Corporate events, including team outings, dinners, volunteer activities and company sports teams
• Education reimbursement and learning opportunities
• Modern offices with multi-monitor setups