Security & IT Risk Lead | Flexible Hours, Unlimited PTO

Marktlink Capital; Amsterdam; On-site; EUR 70,000 - 98,000; Full time

Benefits offered by this job

Competitive salary

Annual bonus

Unlimited holidays

Flexible working hours

Funds participation under favorable条件

Learning and development opportunities

HP laptop and iPhone

Office lunch

Team events (ski trip, gala)

Job summary

Marktlink Capital is seeking an ICT Risk & Security Specialist to own and mature our security controls across SaaS vendors, audits and incident readiness. You’ll work with Compliance and the Board to ensure regulators and investors see robust protections for deal files, fund data and investor information.

You’ll join the Data, Technology & Reporting team, collaborating cross-functionally to implement safer access, smarter monitoring and effective security awareness.

Qualifications

• At least two years of experience in security, IT risk or IT audit, ideally in or around financial services.
• Familiarity with DORA and ISO 27001 or NIST.
• Ability to read SOC 2 report, spot gaps and ask useful follow‑up questions.
• Working knowledge of Microsoft 365 and its security settings.
• A practical, collaborative approach: take ownership, communicate clearly and know when to involve others.
• Strong written English.
• ISO 27001 Lead Implementer or CRISC welcome but not required.

Responsibilities

• Keep an overview of SaaS vendors, review security and audit reports, and follow up on risks or gaps with the relevant teams.
• Consolidate ICT risk controls into one calendar and ensure evidence is ready for investors, auditors or regulators.
• Identify critical systems, assess risks and prepare the annual ICT risk update for the Board.
• Coordinate incident reporting, annual incident rehearsals and external resilience and continuity tests; track findings until resolved.
• Run access reviews and manage exceptions, joiners, movers and leavers.
• Answer investor security questionnaires and build a library of responses for future use.
• Review security of new apps and AI tools before they’re introduced.
• Collaborate with the IT architect and service provider on pragmatic improvements (secure access, safer defaults).
• Make security understandable for colleagues through awareness activities and clear Q&A.

Skills

IT security

IT risk

IT audit

SOC 2

ISO 27001

NIST

Microsoft 365 security

English writing

CRISC (nice-to-have)

Education

Relevant academic background

Tools

Microsoft 365

Job description

Marktlink Capital is seeking an ICT Risk & Security Specialist to own and mature our security controls across SaaS vendors, audits and incident readiness. You’ll work with Compliance and the Board to ensure regulators and investors see robust protections for deal files, fund data and investor information.

You’ll join the Data, Technology & Reporting team, collaborating cross-functionally to implement safer access, smarter monitoring and effective security awareness.