Senior Information Security Expert (f/d/m)

DESTINATION FOR GREAT TALENT

At Trade Republic, we are on a mission to democratize wealth. We set up millions of Europeans for wealth with fast, easy, and free access to capital markets. With over one million customers we are one of the largest savings platforms in Europe, with users holding over €6 billion on our platform.

We are seen as the go-to-destination for top talent from across the globe. Everyday we strive to make Trade Republic a great environment to do the best work of your life, surrounded by exceptional, caring and passionate colleagues. In addition to learning and growing with a world-class team, you will build a destination for everyone across Europe to put money to work.

ABOUT THE TEAM

Information Security protects Trade Republic’s most valuable asset efficiently against threats, fraud, and legal penalties. We enable Trade Republic to grow, compete and establish a trusted relationship with our customers. We strive for innovation while protecting and stabilizing technologies, processes, and our data.

WHAT YOU'LL BE DOING

• Continual improvement of the company ISMS, and steering toward higher levels of ISO 27001:2013 compliance
• Select and implement Risk Assessment Methodologies, such as IRAM2. Continuous improvement of risk identification, documentation, treatment, managing and monitoring
• Establishing and updating company-wide policies, processes, work instructions, baselines, guidelines and other level documentation across the business
• Conducting internal information security audits based on ISO27k and assist in external audit processes
• Control efficiency analysis 
• Consult Security Engineering and Security Operations on matters of Information Security architecture
• Designing and developing data driven solutions to ICT risk assessments and mitigation strategies.
• Creating automation tools for measuring and managing control effectiveness within the scope of the IS Risk Management Framework
• Being a sparring partner for the first level of defence in matters of streamlining and automating business processes such as
  • Incident management
  • Exception management
  • Threat management
  • Vulnerability management
• Information Security Responsibilities
  • Participate in knowledge sharing with other members of information security and risk management in 2nd and 1st line of defence. 

WHAT WE LOOK FOR

• Minimum five years of experience in Cyber Security 
• Experience working in a regulated environment, ideally with MaRisk, BAIT, ZAIT
• Experience with working with ISO27k
• Preferred key industry certifications such as ISC² CISSP, ISACA CISM, ISACA CGEIT, ISO 27001, The OpenGroup FAIR Risk framework.
• Experience with AWS or multicloud environments
• Having the mindset for making information security and compliance, data-driven and automated in fast-paced cloud based IT environments. 
• Experience in scripting or programming
• Working knowledge of German
• Nice to have: ITILv4 certification(s), Good understanding of Devops practices, Good understanding of Devsecops practices
• Excellent verbal and written skills; ability to analyze and summarize complex  information both in written and verbal communication skills in English.  
• Strong problem-solving and analytical skills. 
• Excellent interpersonal skills. 

WHY YOU SHOULD APPLY NOW

 

At Trade Republic you will get to do the best work of your career. We are a destination for people who are exceptional at what they do. Every day, we strive to build a world-class team and provide the space for people to do their best. We have a relentless ambition of raising the bar and expect the best from ourselves. Through our dedicated people-first management approach and transparent career paths, you will have the opportunity to develop and grow your career like never before. And because you are surrounded by a diverse team of high performers, you will be learning every day.

 

You will play an important role in fixing one of the largest challenges we face - closing the pension gap and democratizing wealth. Trade Republic is a place where your job, your career and your passions intersect. If this gets you fired up, just like it does for all of us at Trade Republic, then reach out!

Trade Republic embraces diversity and strives for equal opportunity for everyone. We are committed to building a team that represents a variety of backgrounds, characteristics, perspectives and skills. We encourage applicants of diverse gender, age, sexuality, religion, ethnicity, disability status and parental status to apply to our roles, or those from other intersecting minority groups not listed. The