Senior Associate, Cybersecurity

Innocap; Wrocław; Hybrid; PLN 180,000 - 260,000; Full time

Job summary

Innocap in Wroclaw is seeking a Senior Associate, Cybersecurity to join our 24x7 MSSP-aligned security operations. You will handle incident response, vulnerability remediation, and CSPM-related work, coordinating with IT Ops and DevOps teams across regions.

You will lead evidence collection for SOC2 and ISO 27001 audits, prepare reports under DORA, and answer client due-diligence questionnaires. Strong English skills required; Polish a plus.

Qualifications

• Minimum 5 years in cybersecurity, covering security operations and governance, risk and compliance.
• Hands-on experience with the Microsoft security stack: Sentinel (including KQL), Defender XDR, Entra ID, Intune and Purview.
• Experience working with or overseeing an MSSP or Security Operations Centre.
• Experience managing vulnerability remediation, including CVE prioritization and cloud security posture findings, ideally in Microsoft Azure.
• Familiarity with application security testing tools (SAST, DAST, software composition analysis) and working with DevOps teams to fix findings.
• Experience supporting SOC 2, ISO/IEC 27001 or similar audits, including evidence collection.
• Knowledge of DORA and GDPR, with regulated-industry experience preferred.
• Certifications such as Microsoft SC-200/AZ-500, CompTIA Security+ or CISSP; ISO 27001 Lead Implementer/Auditor a plus.
• Strong organization, follow-through, and ability to influence without direct authority.
• Fluent English; Polish is an asset.

Responsibilities

• Serve as day-to-day internal partner to the MSSP and act as first responder to security escalations.
• Verify remediation of vulnerabilities and track findings to closure.
• Oversee code scanning performed by DevOps and ensure fixes are implemented.
• Conduct access reviews across Entra ID and prepare evidence for audits.
• Produce cybersecurity reports, ICT security updates, and incident reporting under DORA.
• Respond to client due-diligence questionnaires and inquiries.
• Act as a go-to contact for cybersecurity questions within the company.
• Collaborate with teams across North America, Europe, and India; influence without authority.

Skills

Security operations

Governance & compliance

Azure security

MSSP oversight

SAST & DAST

SOC 2 / ISO 27001

DORA & GDPR

Written communication

English fluency

Education

CISSP

SC-200/AZ-500

Tools

Microsoft Sentinel

Defender XDR

Entra ID

Intune

Purview

KQL

SAST/DAST tools

Job description

Senior Associate, CybersecurityAdd Cookie Policy Here or we can remove this.### Senior Associate, CybersecurityApply: Wroclaw: Full time: Posted Yesterday: JR100231**ABOUT INNOCAP** Innocap is the leading Dedicated Managed Account Platform (DMAP) globally, providing institutional allocators with a superior way to structure, access, and oversee their alternative investments. With over US$135 billion on the platform and more than 570 employees across the globe, we are transforming how allocators access and manage alternative investments. Powered by our people, processes and purpose‐built technology, Innocap is seeking forward-thinking individuals to join us on our exciting journey. At Innocap, you won't just manage what’s here today. You’ll build what comes next. Here, careers are about building, not maintaining. We give our people the freedom to think boldly, move quickly, and create real impact with less red tape. Driven by transformation, trust and collaboration, we never settle for the status quo and are constantly finding better ways to serve our clients and actively shape the future of the investment industry.At Innocap, your work makes a difference every day – and helps build what’s next for our clients, the industry, and your career.Because the future doesn’t build itself. We do. **ABOUT THE ROLE**We are looking for a Senior Associate, Cybersecurity to join our Cybersecurity team in Poland. You will be our day-to-day internal partner to our 24x7 Managed Security Service Provider (MSSP). You will be the first internal responder to security escalations during European hours and contain routine incidents using approved playbooks.You will verify the remediation of vulnerabilities the MSSP finds through CVE detection and cloud security posture management (CSPM). That means monitoring findings assigned to IT Operations and development teams, and tracking them to closure. You will also oversee the application code scanning our DevOps teams run with SAST and DAST tools, making sure scans happen and findings get fixed.Beyond operations, you will run access reviews across our Microsoft Entra ID environment and lead evidence collection for our SOC 1 and SOC 2 Type II audits. You will prepare cybersecurity reports, including ICT security and incident reporting under DORA, and help answer client due-diligence questionnaires. You will also be a go-to contact for colleagues’ cybersecurity questions.This is a hands-on role with real ownership in a small team. You will work closely with the Toronto-based Cybersecurity Manager and Specialist, and with IT Operations and development teams across North America, Europe and India. Your work will directly shape our audit results, our responses to institutional clients, and our regulatory readiness. **PRIMARY QUALIFICATIONS & SKILLS*** Minimum 5 years in cybersecurity, ideally covering both security operations and governance, risk and compliance.* Hands-on experience with the Microsoft security stack: Sentinel (including KQL), Defender XDR, Entra ID (Conditional Access, Privileged Identity Management), Intune and Purview.* Experience working with or overseeing an MSSP or Security Operations Centre.* Experience managing vulnerability remediation, including CVE prioritization and cloud security posture findings, ideally in Microsoft Azure.* Familiarity with application security testing tools (SAST, DAST, software composition analysis) and working with DevOps teams to get findings fixed.* Experience supporting SOC 2, ISO/IEC 27001 or similar audits, including evidence collection and control testing.* Working knowledge of DORA and GDPR, including ICT security and incident reporting; financial services or other regulated-industry experience preferred.* A relevant certification such as Microsoft SC-200/AZ-500, CompTIA Security+ or CySA+, or ISC2 SSCP / CISSP. ISO/IEC 27001 Lead Implementer or Lead Auditor is a plus.* Strong organization and follow-through, and the ability to get other teams to act without direct authority.* Clear written communication, including reports for management and plain-language answers to employee questions.* Fluent English; Polish is an asset.#LI-Hybrid*Innocap is an equal opportunity employer. We are dedicated to hiring diverse talent and fostering an inclusive, equitable, and people-first culture where everyone feels valued, respected, and empowered to contribute fully – regardless of their background. With employees across the globe, we firmly believe that the unique perspectives and strengths of our people help us grow stronger and allow us to better serve our clients.* *If you require accommodation at any stage during your application process, please let us know.*