ICT Risk & Security Specialist

Marktlink Capital; Amsterdam; Híbrido; EUR 70 000 - 100 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Salary plus annual bonus

Unlimited holidays

Flexible working hours

HP laptop and iPhone

Office lunch (small fee)

Team events: ski trip and Marktlink-Ga

Pre-employment screening

Resumo da oferta

Marktlink Capital is seeking an ICT Risk & Security Specialist to own and advance our security program. You will oversee vendor security reviews, manage ICT risk evidence, and coordinate incident response and resilience testing.

You will work closely with Compliance and report to the Board, helping shape AI/data governance and security practices across the firm. You will join the Data, Technology & Reporting team and help turn security into a daily habit, ensuring controls scale with growth and

Qualificações

• At least two years of experience in security, IT risk or IT audit.
• Familiarity with DORA and ISO 27001 or NIST.
• Ability to read a SOC 2 report, spot gaps and ask useful follow-up questions.
• Working knowledge of Microsoft 365 and its security settings.
• A practical, collaborative approach; takes ownership and communicates clearly.

Responsabilidades

• Keep an overview of SaaS vendors, review security and audit reports, follow up on risks or gaps.
• Compile ICT risk calendar and evidence for investors/auditors/regulators.
• Prepare annual ICT risk update for the Board by identifying critical systems and assessing risks.
• Coordinate incident reporting, rehearsals, and resilience tests; track findings to resolution.
• Run access reviews and manage exceptions, joiners, movers and leavers.
• Answer investor security questionnaires and build a library of responses.

Conhecimentos

Security risk

SOC 2

ISO 27001

CRISC

Formação académica

Relevant academic background

Ferramentas

Microsoft 365

Descrição da oferta de emprego

• Reporting & Data

About Marktlink Capital

Marktlink Capital is a Private Equity, Venture Capital and Private Income fund manager headquartered at CitySide Amsterdam. We give entrepreneurs and private investors access to leading funds across Europe and North America. Our team of more than 80 professionals manages over €3.8 billion in capital commitments from nearly 3,000 investors, invested across more than 250 PE and VC funds.

Our investors trust us with sensitive deal, fund and investor information. Until now, ICT risk and security have been a shared effort between our technology team, Compliance and a specialised IT service provider. As our ICT Risk & Security Specialist, you’ll give this work a dedicated owner. You’ll keep controls on track and help build a security approach that grows with Marktlink Capital.

This is no box-ticking exercise. Regulators and investors rightly expect us to show how we look after what they entrust to us, as we grow and the bar keeps risingy, you make sure we stay ahead of it. With the right team behind you.

What you’ll do

Keep an overview of our SaaS vendors, review their security and audit reports, and follow up on risks or gaps with the relevant teams.

Bring our ICT risk controls into one calendar and make sure the evidence is ready when investors, auditors or regulators ask for it.

Work with colleagues to identify critical systems, assess risks and prepare the annual ICT risk update for the Board.

Coordinate incident reporting, annual incident rehearsals and external resilience and continuity tests. Track findings until they’re resolved.

Run access reviews and keep track of exceptions, joiners, movers and leavers.

Answer investor security questionnaires and build a library of responses that makes the next one easier.

Help colleagues classify and protect deal files, fund data and investor information, and review the security of new apps and AI tools before they’re introduced.

Work with our IT architect and IT service provider on practical improvements, from secure access across our tools to safer defaults for file sharing, devices and admin rights.

Make security understandable for colleagues through useful awareness activities and clear answers to their questions.

You join the Data, Technology & Reporting team: a small team that builds and runs Marktlink Capital's systems, data and AI tools. You're in the room from the moment something new is dreamt up, so security is never an afterthought. You share one agenda with our Compliance. They write and test the rules, you carry them out and provide the evidence. That way nobody marks their own homework. You also have a direct line to the Board member responsible for ICT risk. If you're worried, the Board hears it from you.

Job requirements

What you bring

At least two years of experience in security, IT risk or IT audit, ideally in or around financial services and a relevant academic background.

Familiarity with DORA and experience working with ISO 27001 or NIST.

The ability to read a SOC 2 report, spot gaps and ask useful follow-up questions.

Working knowledge of Microsoft 365 and its security settings, with an interest in getting hands-on.

A practical, collaborative approach: you take ownership, communicate clearly and know when to involve others.

A certification such as ISO 27001 Lead Implementer or CRISC is welcome, but not required.

Why Marktlink Capital?

You’ll be the first person in this role, with the support to make it your own. In your first year, you’ll bring our controls together, review key vendors, help run an incident rehearsal and deliver an improvement project. From there, you’ll have room to help shape what comes next, including how we govern AI and data.

Next to that we offer:

A competitive salary and annual bonus.

Unlimited holidays and flexible working hours.

The opportunity to participate in our funds under favourable conditions.

Learning opportunities and room to develop your expertise.

An HP laptop and iPhone.

Office lunch for a small fee.

Team events, including the annual paid ski trip and Marktlink Gala.

A positive result from the pre-employment screening is required before we can offer an employment contract.

Disclaimer for Agencies

Marktlink Capital does not accept unsolicited resumes or candidate profiles from recruitment agencies without a prior signed agreement. While we may review such submissions, they will be considered unsolicited and will not give rise to any obligation, including the payment of fees. We kindly request agencies to refrain from contacting our employees directly regarding candidate submissions.

Frequently Asked Questions

Which documents should I include in my application?

Please provide us with your most recent CV and cover letter. The latter is not required, but highly appreciated.

Are there any special requirements for working at Marktlink Capital?

For full-time investment professionals a finished masters degree in finance or equivalent education is mandatory. For all the other positions (incl. internships) please take a look at the requirements per job.

Does Marktlink Capital offer a relocation package?

Unfortunately, we currently do not offer any relocation packages.

Does Marktlink Capital provide IND sponsorship for positions?

Yes! Marktlink Capital is happy to provide IND sponsorship for senior, highly-skilled migrants.