ICT Risk & Security Specialist

Marktlink Capital; Amsterdam; Presencial; EUR 70 000 - 98 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Competitive salary

Annual bonus

Unlimited holidays

Flexible working hours

Funds participation under favorable条件

Learning and development opportunities

HP laptop and iPhone

Office lunch

Team events (ski trip, gala)

Resumo da oferta

Marktlink Capital is seeking an ICT Risk & Security Specialist to own and mature our security controls across SaaS vendors, audits and incident readiness. You’ll work with Compliance and the Board to ensure regulators and investors see robust protections for deal files, fund data and investor information.

You’ll join the Data, Technology & Reporting team, collaborating cross-functionally to implement safer access, smarter monitoring and effective security awareness.

Qualificações

• At least two years of experience in security, IT risk or IT audit, ideally in or around financial services.
• Familiarity with DORA and ISO 27001 or NIST.
• Ability to read SOC 2 report, spot gaps and ask useful follow‑up questions.
• Working knowledge of Microsoft 365 and its security settings.
• A practical, collaborative approach: take ownership, communicate clearly and know when to involve others.
• Strong written English.
• ISO 27001 Lead Implementer or CRISC welcome but not required.

Responsabilidades

• Keep an overview of SaaS vendors, review security and audit reports, and follow up on risks or gaps with the relevant teams.
• Consolidate ICT risk controls into one calendar and ensure evidence is ready for investors, auditors or regulators.
• Identify critical systems, assess risks and prepare the annual ICT risk update for the Board.
• Coordinate incident reporting, annual incident rehearsals and external resilience and continuity tests; track findings until resolved.
• Run access reviews and manage exceptions, joiners, movers and leavers.
• Answer investor security questionnaires and build a library of responses for future use.
• Review security of new apps and AI tools before they’re introduced.
• Collaborate with the IT architect and service provider on pragmatic improvements (secure access, safer defaults).
• Make security understandable for colleagues through awareness activities and clear Q&A.

Conhecimentos

IT security

IT risk

IT audit

SOC 2

ISO 27001

NIST

Microsoft 365 security

English writing

CRISC (nice-to-have)

Formação académica

Relevant academic background

Ferramentas

Microsoft 365

Descrição da oferta de emprego

About Marktlink Capital

Marktlink Capital is a Private Equity, Venture Capital and Private Income fund manager headquartered at CitySide Amsterdam. We give entrepreneurs and private investors access to leading funds across Europe and North America. Our team of more than 80 professionals manages over €3.8 billion in capital commitments from nearly 3,000 investors, invested across more than 250 PE and VC funds.

About Marktlink Capital

Marktlink Capital is a Private Equity, Venture Capital and Private Income fund manager headquartered at CitySide Amsterdam. We give entrepreneurs and private investors access to leading funds across Europe and North America. Our team of more than 80 professionals manages over €3.8 billion in capital commitments from nearly 3,000 investors, invested across more than 250 PE and VC funds.

Our investors trust us with sensitive deal, fund and investor information. Until now, ICT risk and security have been a shared effort between our technology team, Compliance and a specialised IT service provider. As our ICT Risk & Security Specialist, you’ll give this work a dedicated owner. You’ll keep controls on track and help build a security approach that grows with Marktlink Capital.

This is no box-ticking exercise. Regulators and investors rightly expect us to show how we look after what they entrust to us, as we grow and the bar keeps risingy, you make sure we stay ahead of it. With the right team behind you.

What You’ll Do

• Keep an overview of our SaaS vendors, review their security and audit reports, and follow up on risks or gaps with the relevant teams.
• Bring our ICT risk controls into one calendar and make sure the evidence is ready when investors, auditors or regulators ask for it.
• Work with colleagues to identify critical systems, assess risks and prepare the annual ICT risk update for the Board.
• Coordinate incident reporting, annual incident rehearsals and external resilience and continuity tests. Track findings until they’re resolved.
• Run access reviews and keep track of exceptions, joiners, movers and leavers.
• Answer investor security questionnaires and build a library of responses that makes the next one easier.
• Help colleagues classify and protect deal files, fund data and investor information, and review the security of new apps and AI tools before they’re introduced.
• Work with our IT architect and IT service provider on practical improvements, from secure access across our tools to safer defaults for file sharing, devices and admin rights.
• Make security understandable for colleagues through useful awareness activities and clear answers to their questions.

You join the Data, Technology & Reporting team: a small team that builds and runs Marktlink Capital's systems, data and AI tools. You're in the room from the moment something new is dreamt up, so security is never an afterthought. You share one agenda with our Compliance. They write and test the rules, you carry them out and provide the evidence. That way nobody marks their own homework. You also have a direct line to the Board member responsible for ICT risk. If you're worried, the Board hears it from you.

What You Bring

• At least two years of experience in security, IT risk or IT audit, ideally in or around financial services and a relevant academic background.
• Familiarity with DORA and experience working with ISO 27001 or NIST.
• The ability to read a SOC 2 report, spot gaps and ask useful follow‑up questions.
• Working knowledge of Microsoft 365 and its security settings, with an interest in getting hands‑on.
• A practical, collaborative approach: you take ownership, communicate clearly and know when to involve others.
• Strong written English.
• A certification such as ISO 27001 Lead Implementer or CRISC is welcome, but not required.

Why Marktlink Capital?

You’ll be the first person in this role, with the support to make it your own. In your first year, you’ll bring our controls together, review key vendors, help run an incident rehearsal and deliver an improvement project. From there, you’ll have room to help shape what comes next, including how we govern AI and data.

Next to that we offer:

• A competitive salary and annual bonus.
• Unlimited holidays and flexible working hours.
• The opportunity to participate in our funds under favourable conditions.
• Learning opportunities and room to develop your expertise.
• An HP laptop and iPhone.
• Office lunch for a small fee.
• Team events, including the annual paid ski trip and Marktlink Gala.

A positive result from the pre‑employment screening is required before we can offer an employment contract.