Senior Associate, Cybersecurity

Innocap Investment Management Inc.; Wrocław; Hybrid; PLN 180,000 - 260,000; Full time

Job summary

Innocap is seeking a Senior Associate, Cybersecurity to join the Cybersecurity team in Poland. You will be the day-to-day internal partner to our MSSP, acting as the first responder to security escalations and containing incidents using approved playbooks. You will verify CVE findings, manage CSPM, and oversee SAST/DAST scans.

You will support SOC 1/2 audits and client due-diligence responses. You’ll collaborate with teams across North America, Europe and India, and work in a hybrid environment

Qualifications

• Minimum 5 years in cybersecurity, covering security operations and governance, risk and compliance.
• Experience with Microsoft security stack: Sentinel, Defender XDR, Entra ID, Intune and Purview.
• Familiarity with MSSP or Security Operations Centre operations.
• Experience handling vulnerability remediation, CVE prioritization, CSPM.
• Working knowledge of DORA and GDPR; audits like SOC 2/ISO 27001 are a plus.

Responsibilities

• Respond to security escalations during European hours and contain incidents using approved playbooks.
• Verify remediation of vulnerabilities identified by MSSP and CSPM findings.
• Oversee application code scanning with SAST/DAST and ensure findings are fixed.
• Lead evidence collection for SOC 1 and SOC 2 Type II audits.
• Prepare ICT security and incident reports under DORA and assist client due-diligence questionnaires.

Skills

Security operations

GRC (governance, risk & compliance)

Documentation & reporting

Cross-team coordination

Fluent English

Tools

Microsoft Sentinel

Defender XDR

Entra ID

Intune

Purview

SAST & DAST

Job description

ABOUT INNOCAP

Innocap is the leading Dedicated Managed Account Platform (DMAP) globally, providing institutional allocators with a superior way to structure, access, and oversee their alternative investments. With over US$135 billion on the platform and more than 570 employees across the globe, we are transforming how allocators access and manage alternative investments. Powered by our people, processes and purpose-built technology, Innocap is seeking forward-thinking individuals to join us on our exciting journey. At Innocap, you won't just manage what's here today. You'll build what comes next. Here, careers are about building, not maintaining. We give our people the freedom to think boldly, move quickly, and create real impact with less red tape. Driven by transformation, trust and collaboration, we never settle for the status quo and are constantly finding better ways to serve our clients and actively shape the future of the investment industry. At Innocap, your work makes a difference every day - and helps build what's next for our clients, the industry, and your career. Because the future doesn't build itself. We do.

ABOUT THE ROLE

We are looking for a Senior Associate, Cybersecurity to join our Cybersecurity team in Poland. You will be our day-to-day internal partner to our 24x7 Managed Security Service Provider (MSSP). You will be the first internal responder to security escalations during European hours and contain routine incidents using approved playbooks. You will verify the remediation of vulnerabilities the MSSP finds through CVE detection and cloud security posture management (CSPM). That means monitoring findings assigned to IT Operations and development teams, and tracking them to closure. You will also oversee the application code scanning our DevOps teams run with SAST and DAST tools, making sure scans happen and findings get fixed. Beyond operations, you will run access reviews across our Microsoft Entra ID environment and lead evidence collection for our SOC 1 and SOC 2 Type II audits. You will prepare cybersecurity reports, including ICT security and incident reporting under DORA, and help answer client due-diligence questionnaires. You will also be a go-to contact for colleagues' cybersecurity questions. This is a hands-on role with real ownership in a small team. You will work closely with the Toronto-based Cybersecurity Manager and Specialist, and with IT Operations and development teams across North America, Europe and India. Your work will directly shape our audit results, our responses to institutional clients, and our regulatory readiness.

PRIMARY QUALIFICATIONS & SKILLS

Minimum 5 years in cybersecurity, ideally covering both security operations and governance, risk and compliance. Hands-on experience with the Microsoft security stack: Sentinel (including KQL), Defender XDR, Entra ID (Conditional Access, Privileged Identity Management), Intune and Purview. Experience working with or overseeing an MSSP or Security Operations Centre. Experience managing vulnerability remediation, including CVE prioritization and cloud security posture findings, ideally in Microsoft Azure. Familiarity with application security testing tools (SAST, DAST, software composition analysis) and working with DevOps teams to get findings fixed. Experience supporting SOC 2, ISO/IEC 27001 or similar audits, including evidence collection and control testing. Working knowledge of DORA and GDPR, including ICT security and incident reporting; financial services or other regulated-industry experience preferred. A relevant certification such as Microsoft SC-200/AZ-500, CompTIA Security+ or CySA+, or ISC² SSCP / CISSP. ISO/IEC 27001 Lead Implementer or Lead Auditor is a plus. Strong organization and follow-through, and the ability to get other teams to act without direct authority. Clear written communication, including reports for management and plain-language answers to employee questions. Fluent English; Polish is an asset.

#LI-Hybrid

Innocap is an equal opportunity employer. We are dedicated to hiring diverse talent and fostering an inclusive, equitable, and people-first culture where everyone feels valued, respected, and empowered to contribute fully – regardless of their background. With employees across the globe, we firmly believe that the unique perspectives and strengths of our people help us grow stronger and allow us to better serve our clients. If you require accommodation at any stage during your application process, please let us know.

Innocap's Global Privacy Notice

About Us

At Innocap, careers are about building, not maintaining. We give our people the freedom to think boldly, move quickly, and create real impact with less red tape. Driven by transformation, trust and collaboration, we never settle for the status quo and are constantly finding better ways to serve our clients and actively shape the future of the investment industry. Our culture is rooted in collaboration, entrepreneurial spirit, and a shared ambition to push boundaries.

• Exposure to diverse alternative investment strategies
• An inclusive culture that values creativity, proactivity, and continuous growth
• Flexible hybrid work for better balance
• A strong focus on service excellence and meaningful partnerships

At Innocap, your work makes a difference every day - and helps build what's next for our clients, the industry, and your career. Because the future doesn't build itself. We do.