IT Security Consultant

Murex; Singapore; Hybrid; SGD 95,000 - 138,000; Full time

Job summary

Murex is seeking an IT Security Consultant to join its global Information Security team in Paris. You will translate governance, risk and compliance into practical security requirements and drive evidence-based monitoring across business and IT units.

The role focuses on control effectiveness, third-party security and security awareness, with collaboration across Legal, IT and Procurement to embed security into projects and operations.

Qualifications

• 5–7 years of information security experience focusing on governance, risk, compliance, audit or control monitoring.
• Ability to translate policy to actionable security requirements for diverse stakeholders.
• Experience in coordinating security assessments, evidence gathering and remediation tracking.

Responsibilities

• Define, implement and monitor information security governance framework.
• Drive compliance monitoring, evidence expectations and remediation progress.
• Lead or coordinate security assessments, audit preparations and control testing.

Skills

Governance & risk

Compliance

Audit

Security awareness

Communication

Risk-based decisions

Security governance

Education

CISSP / CRISC / CISM certifications

ISO 27001 Lead Implementer/Auditor

Tools

Job description

## IT Security ConsultantApply: Paris: Full time: Posted 2 Days Ago: JR103267Murex is a global fintech leader in trading, risk management and processing solutions for capital markets.Operating from our 19 offices, 3 400 Murexians from over 65 different nationalities ensure the development, implementation and support of our platform which is used by banks, asset managers, corporations and utilities, across the world. Join Murex and work on the challenges of an industry at the forefront of innovation and thrive in a people-centric environment. You’ll be part of one global team where you can learn fast and stay true to yourself. **Team**Join Murex’s Information Security team and help strengthen the cyber resilience of a global fintech serving some of the world’s leading financial institutions. In this role, you will turn governance, risk and compliance into practical security outcomes: clear requirements, measurable controls, effective remediation plans and trusted guidance for business and technology teams. **Your role**Support the definition, implementation and monitoring of Murex’s information security governance framework, with a focus on compliance, risk follow-up, control effectiveness, third-party security, and security awareness.Your main mission will be:* Shape and continuously improve Murex’s information security governance framework, translating policies, standards and control requirements into actionable practices for global teams.* Drive compliance monitoring by defining evidence expectations, tracking remediation progress and ensuring security requirements are consistently understood and applied.* Design and improve operating procedures that make control execution, compliance monitoring, security reporting and posture management scalable and reliable.* Lead or coordinate security assessments, maturity reviews, audit preparation, compliance checks and follow-up of identified gaps across business, IT and security stakeholders.* Build meaningful security and compliance dashboards that give management a clear view of risks, maturity, control effectiveness and remediation priorities.* Contribute to Third-Party Risk Management by reviewing supplier assessments, supporting procurement activities and following up on remediation actions with vendors and internal owners.* Support AI governance initiatives by helping define practical security guardrails, reviewing AI use cases and monitoring risks linked to AI tools, services and autonomous capabilities.* Act as a trusted security advisor for business and IT teams by qualifying requests, documenting risk-based recommendations and ensuring timely follow-up.* Partner with IT, Legal, Procurement, Product and business stakeholders to embed security requirements into projects, operations, exceptions and continuous improvement plans.* Support internal and external audits, client security questionnaires and compliance assessments with clear answers, relevant evidence and sustainable remediation plans.* Promote a strong security culture through targeted awareness initiatives, practical guidance, communication material and training content adapted to different audiences. **What we are looking for**You have 5 to 7 years of experience in information security, with exposure to governance, risk management, compliance, audit, security awareness, advisory or control monitoring activities. You enjoy making security requirements understandable, measurable and actionable for diverse stakeholders. **Your strengths*** Strong understanding of information security governance, risk and compliance frameworks, with the ability to turn them into pragmatic operational requirements.* Hands-on experience designing and improving security procedures, compliance workflows, control guidance and evidence collection practices.* Experience performing or coordinating security assessments, control testing, audit preparation and remediation follow-up.* Ability to structure complex topics, connect technical and business perspectives, and help stakeholders make informed risk-based decisions.* Excellent written and verbal communication skills, with the ability to produce clear procedures, assessment outcomes, remediation plans and management-level reporting.* Good knowledge of key security domains such as vulnerability management, incident response, identity and access management, third-party security and control monitoring.* Exposure to Third-Party Risk Management, including supplier assessments, security requirements, remediation tracking and collaboration with Procurement or vendor owners.* Interest in AI governance topics, including AI-related risk assessment, acceptable use, security guardrails and collaboration with Legal, IT, Procurement or business teams.* Structured mindset for handling security requests and exceptions with traceability, prioritization, clear communication and timely follow-up.* Collaborative attitude, curiosity and the ability to build trusted relationships while promoting security as a business and technology enabler.* Relevant certifications such as CISSP, CRISC, CISM, ISO 27001 Lead Implementer or Lead Auditor would be appreciated.