Information Security, Risk & Compliance Manager Job at Fever

Risk and Compliance Manager

The Program Manager position will report to the Head of Risk for the India team ...

Location

India , Bengaluru

Salary:

Not provided

Atlassian

Expiration Date

Until further notice

Requirements

Minimum 5 years of experience in IT audit, compliance, control monitoring or a related field
Experience with SOC 2, ISO 27001/27018, HIPAA, PCI, C5 and GDPR frameworks and requirements
Familiarity with compliance frameworks and standards such as NIST 800-53
Experience with the software development business for cloud service providers
Experience with Technology Risk Management, Compliance and Information Security
Experience with control and risk frameworks, performing compliance and risk assessments, creating controls and overseeing mitigation projects
Experience with translating compliance requirements to engineering and product teams
Experience with determining scope, timeline creation, complex project tracking, risk management, and process improvement
Familiarity with Jira and Confluence
Relevant certifications such as CISA, CISSP, or ISO 27001 Lead Auditor are highly desirable

Job Responsibility

Perform design and operating effectiveness testing on controls to ensure compliance with SOC 2, ISO 27001/27018, C5, HIPAA and other compliance obligations
Collaborate with control owners to review the design and effectiveness of controls, ensuring they meet certification requirements
Identify any gaps in compliance and work with relevant teams to remediate findings before the external audit
Drive control automation & control monitoring efforts
Maintain comprehensive documentation of controls, testing procedures, and evidence to support compliance efforts
Work closely with internal stakeholders, including product and functional teams, to address architectural, infrastructure, or new services that impact compliance
Assist in preparing for external audits by ensuring all necessary documentation and evidence are in place and up to date
Assess and document the impact of control gaps in SOC reports of critical third party suppliers
Identify compensating controls and follow up with business owners
Perform design and operating effectiveness testing on predefined Privacy controls to ensure compliance with GDPR

What we offer

health coverage
paid volunteer days
wellness resources

Fulltime

Information Security Risk Lead

The Information Security Risk Lead is responsible for driving efforts to support...

Location

Thailand , Bangkok

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

Master’s/Bachelor’s/University degree or equivalent experience in Computer Science, Cyber Security, Computer/Information Engineering, Information Technology or a related discipline is preferred
One or more industry-recognized cybersecurity-related certifications such as CISSP, CISA, CISM, CRISC, ISO 27001
6 - 10 years or above of relevant experience in Cyber Security Management / Cyber Security Operations / Technology Risk Management / Third-party Risk Management or IT Audit, preferably with experience gained from banking / finance services industry / consultancy / control compliance or legal disciplines
Experience in assessing cyber regulatory compliance from BOT, SEC etc.
Strong understanding of International Standards/Frameworks such as: NIST, ISO 27001series, COBIT, CIS, GDPR, DORA, etc.
Proficient in interpreting and applying policies, standards and procedures
Excellent project management and organizational skills (PMP, PRINCE2, etc. is a plus)
Strong consultation, reporting writing and communication skills with highly proficiency in both spoken and written English and Thai
Thai language fluency is a must.

Job Responsibility

Manage and validate deliverables of all Information Security (IS) programs, ensuring closure per agreed timelines and goals
Engagement with local regulators BOT, SEC, TB-CERT, Thai-CERT, MDES, NCSA, etc. on IS related matters
Manage regulatory exams and internal & external audits
Work closely with Global & Regional Information Security teams to improve processes and reduce risk, and support the IS regulatory related activities for Thailand
Manage internal/external resources to organize cyber-attack simulations exercise, coordinating and overseeing vulnerability, mitigation/remediation/correction action plans, and issues management process
Accountable for delivery of the associated remediation from regulatory assessments
Proficiency in preparing periodic updates / reports / presentation deck for both internal stakeholders and regulators
Provide timely and appropriate updates to regional and global stakeholders
escalate issues in a timely manner to senior management
Build and develop partnerships with business, IT, risk, compliance, IS, senior management staff and stakeholders

Fulltime

Information Security Identity & Access Management Analyst

The Info Sec Prof Senior Analyst is an intermediate level position responsible f...

Location

India , Chennai

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

5-8 years of relevant Identity and Access Management experience
Applicable Certifications or willingness to earn within 12 months of joining
Consistently demonstrates clear and concise written and verbal communication
Proven influencing and relationship management skills
Proven analytical skills
Bachelor’s degree/University degree or equivalent experience

Job Responsibility

Identify potential Identity and Access Management (IAM) risks and make recommendations for enhancement
Lead execution of IAM governance procedures, specifically focusing on non-worker identities and IAM resources
Collect and analyze security risk evidence and coordinate with internal and external compliance and auditing agencies / officials
Develop and operationalize key risk indicators for related IAM topics and governance procedures
Produce insights from data that are tailored to specific requirements and audiences
Execute meetings and communicate complex security topics and IAM standards and best practices with all levels of the organization
Ensure that controls are utilized daily and that non-compliance remediation is addressed
Drive technological projects with cross-functional teams that support the expansion of IAM governance
Provide IAM consulting services, including interpreting and/or clarifying information security policy, procedures, standards or concepts
Assist with defining, implementing, and governing IS standards to align procedures and practices in compliance with Citi standards

What we offer

Best-in-class benefits
Global benefits
Equal opportunity employer

Fulltime

Information Security Manager

Cogoport is on a mission to bridge the $3.4 trillion Trade Knowledge and Executi...

Location

India , Mumbai

Salary:

Not provided

Cogoport

Expiration Date

Until further notice

Requirements

7+ years of experience in cybersecurity, risk management, and information security leadership
Bachelor's/master’s degree in computer science, Information Security, or a related field
Certifications: CISSP, CISM, CEH, or equivalent cybersecurity certifications (preferred)
Expertise in risk assessment, penetration testing, and vulnerability management
Hands-on experience with security tools such as SIEM (Splunk, IBM QRadar), endpoint protection, and cloud security solutions
Strong knowledge of zero-trust security models, identity and access management (IAM), and security operations (SOC)
Ability to effectively communicate security risks and strategies to both technical and non-technical stakeholders

Job Responsibility

Develop and implement a comprehensive cybersecurity strategy aligned with Cogoport’s business objectives
Collaborating with senior leadership as the primary authority for all security-related matters
Oversee security governance and continuous security improvements across all business units
Identify, assess, and mitigate cybersecurity risks across applications, cloud infrastructure, and corporate systems
Conduct periodic security audits, risk assessments, and penetration testing to proactively address vulnerabilities
Ensure compliance with ISO 27001, GDPR, SOC 2, NIST, and other industry security frameworks
Develop, document, and maintain an incident response plan to manage and mitigate security breaches
Oversee the implementation and management of security technologies, including firewalls, IDS/IPS, SIEM, and endpoint protection
Monitor network traffic for anomalies and cyber threats, taking immediate action against security incidents
Lead incident detection, investigation, and response processes while minimizing business impact

Fulltime

Senior Third-Party Security Risk Analyst

As a Senior Third-Party Security Risk Specialist at Ledger, you will play a vita...

Location

France , Paris

Salary:

Not provided

Ledger

Expiration Date

Until further notice

Requirements

Master degree in Information Security, Cybersecurity, or a related field
5+ years of progressive experience in third-party risk management, with a strong background in audit, risk management, compliance, or a related control function within a complex organization
Proven project management skills with the ability to manage complex, cross-functional projects and maintain comprehensive documentation
In-depth knowledge of security frameworks and standards (e.g., ISO 27001, NIST Cybersecurity Framework) and experience in applying them to third-party risk management and regulatory requirements
Excellent analytical and problem-solving skills with a focus on identifying root causes and developing effective solutions
Strong communication and interpersonal skills, including the ability to influence and negotiate with vendors and stakeholders at all levels

Job Responsibility

Conduct comprehensive security assessments of third-party vendors, including reviewing their security policies, procedures, and controls
Proactively identify and evaluate potential security/privacy risks associated with a particular focus on those that could impact Ledger's reputation, financial stability, and customer trust
Develop and implement risk mitigation strategies to address identified vulnerabilities
Lead the collaboration with vendors to remediate security gaps and ensure compliance with Ledger's stringent security requirements
Establish and maintain a robust vendor security monitoring program, driving continuous improvement in vendor security posture and compliance
Develop, implement, and continuously improve Ledger's third-party security risk management program, including policies, standards, procedures, and tools
Prepare reports and presentations on vendor security risks and mitigation efforts to senior management, stakeholders, and the Comex
Participate in audits as part of the Privacy audit program according to the agreed annual audit plan

What we offer

Equity: Employees are the foundation of our success, and we award stock options so you can share in that success as we grow
Flexibility: A hybrid work policy
Social: Annual company outing for Ledgerdary Days, plus frequent social events, snacks and drinks
Medical: Comprehensive health insurance policy offering extensive medical, dental and vision care coverage
Well-being: Personal development, coaching & fitness with our dedicated partners
Vacation: Five weeks of paid leave per year, in addition to national holidays and rest & relaxation (RTT) days
High tech: Access to high performance office equipment and gadgets
Transport: Ledger reimburses part of your preferred means of transportation
Discounts: Employee discount on all our products

Fulltime

Legal Third-Party Management and Information Security Risk Lead

As part of the Legal Outside Counsel, Third Party Management and Operations team...

Location

United Kingdom , Belfast

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

Ability to assess residual risk in complex vendor environments and make sound defensible recommendations
Experience applying risk-based frameworks to prioritize issues and mitigation efforts
Strong interpersonal skills for engaging legal, compliance, technology, procurement and senior risk stakeholders
Proficiency in creating clear and concise reports dashboards and governance experience
Leading or supporting cross functional projects, ability to support risk transformation initiatives, and integrate evolving legal tech and regulatory guidance into assessment methodologies
Bachelor’s degree or equivalent

Job Responsibility

Manage and oversee a set of complex initiatives that span multiple lines of business in the Cyber Security (CS), Information Security (IS) and Third-Party Risk Management (TPRM) space for Global Legal Solutions
Assess the risks and effectiveness of Third Party IS processes and controls based on enterprise requirements ensuring the IS risk is within tolerance
Evaluate the design and execution of the Legal IS Program, identifies potential enhancements and drives implementation of governance, methodologies and tools required for the effective oversight of Third-Party Management IS risk to continually strengthen the Program
Assist the day-to-day activities within the TPM Risk and Info Sec group
Monitor, track and control outcomes to resolve issues, conflicts, dependencies and critical path deliverables related to issues and gaps found in the TPISA process
Drive implementation of enterprise Third Party Management controls required to be assessed as part of the Managers Control Assessment, reviews results, and determines if remediation actions are appropriate
Document control design, testing methodology, and evidence for effectiveness reviews in compliance with Citi's Risk and Control Standards
Contribute to quarterly control certifications, issue management processes and audit engagements

What we offer

Generous holiday allowance starting at 27 days plus bank holidays
increasing with tenure
A discretional annual performance related bonus
Employee Assistance Program
Pension Plan
Paid Parental Leave
Special discounts for employees, family, and friends
Access to an array of learning and development resources
Private medical insurance packages to suit your personal circumstances

Fulltime

Compliance Risk Management Officer

Serve as a Vice President for Independent Compliance Risk Management (ICRM) resp...

Location

Luxembourg , Bertrange

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

Demonstrated knowledge in area of Business in focus i.e. Investor Services and Issuer of securities
Work experience in Regulatory Compliance
Knowledge of EU and Luxembourg laws, rules, regulations, risks and typologies applicable to Credit Institutions
Strong interpersonal skills for building strong relationships with stakeholders and engaging teams
Ability to work both independently and collaboratively and ability to navigate a complex organization
A proactive approach in communication, and strength in sustaining independent views
Strong oral communication and writing skills in interacting with non-executives and executive management and across several business lines and control functions
Must be a self-starter, flexible, innovative and adaptive
Advanced analytical skills
Excellent project management and organizational skills and capability to handle multiple projects at one time

Job Responsibility

Regulatory Change Management and Controls: prompt identification of new or amended regulations impacting Citi activities in Luxembourg
perform impact assessment of the regulations
initiate the regulatory intake for the change management requirements and processes
Regulatory Inventory: Ensure that the regulatory inventory is up to date at all times, mapped to the applicable functions and business lines, along with the regulatory control framework for existing requirements
Management Information: Coordinate with regional and product ICRM stakeholders for escalating relevant ICRM information to local senior management
Compliance reviews: Perform independent testing activities to assess the design and effectiveness of key controls designed to address compliance risk
Credible challenge: Perform independent credible challenge on the first line of defence activities
Advisory role: advise the first line of defence stakeholders on any compliance related matters impacting them
ICRM Training: Ensuring that country elements of the ICRM global training plan are current and reflect local regulations while providing a fresh perspective on local trends and emerging regulation
ensuring that the training delivery method is tailored to the requirements of the subject matter and audience

Fulltime

Canada Compliance Risk Management Sr. Analyst

The AVP, Canada Compliance Risk Management Sr. Analyst serves as a senior compli...

Location

Canada , Toronto

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

5-8 years of experience
Knowledge of Compliance laws, rules, regulations, risks and typologies
A general understanding of securities trading and corresponding regulations with proven ability to prioritize and manage multiple responsibilities
Excellent research and analytical skills
Excellent written and verbal communication skills
Must be a self-starter, flexible, innovative and adaptive
Has the ability to operate with a limited level of direct supervision
Can exercise independence of judgement and autonomy
Acts as subject matter expert (SME) to senior stakeholders and/or other team members
Demonstrated interpersonal skills with the ability to work collaboratively and with people at all levels of the organization, as well as the ability to navigate a complex organization

Job Responsibility

Reviews and analyzes surveillance and trading activity data and assists with developing, maintaining, and performing surveillance reviews and reports as necessary
Identifies potential risks and escalates the issue to a designated supervisor/manager and the respective product coverage areas, as appropriate
Provides troubleshooting support on a wide variety of projects, including ad-hoc projects and regulatory exams directed by other organizations within the compliance and legal departments, to ensure they remain compliant with regulatory and legal requirements
Monitors adherence to ICRM’s risk policies and relevant procedures and remains abreast of any changes to regulations and/or policies to prevent risk and protect the organization
Assists with editing and maintaining ICRM program related materials and interacts with other areas within Citi in a collaborative manner to provide best-in-class surveillance support
Influences senior managerial decisions by advising, counseling, and contributing to team deliverables and projects that impact both the team and the business
Acts as a subject matter expert (SME) to senior stakeholders and/or other team members
Assumes both formal and informal leadership roles within team and assists in training and mentoring new team members upon their arrival
Assesses and mitigates risks to ensure that team projects and deliverables are uninterrupted, and that Citigroup’s reputation is safeguarded when business decisions are made
Appropriately assesses risk when business decisions are made, demonstrating particular consideration for the company's reputation and safeguarding Citi, its clients and assets

Fulltime

Information Security, Risk & Compliance Manager

Fever

Location:
Argentina

Category:
IT - Administration

Contract Type:
Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Nice to have:

Additional Information:

Job Posted:
April 23, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Information Security, Risk & Compliance Manager

Risk and Compliance Manager

Information Security Risk Lead

Information Security Identity & Access Management Analyst

Information Security Manager

Senior Third-Party Security Risk Analyst

Legal Third-Party Management and Information Security Risk Lead

Compliance Risk Management Officer

Canada Compliance Risk Management Sr. Analyst

Information Security, Risk & Compliance Manager

Fever

Location:Argentina

Category:IT - Administration

Contract Type:Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Nice to have:

Additional Information:

Job Posted:April 23, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Information Security, Risk & Compliance Manager

Risk and Compliance Manager

Information Security Risk Lead

Information Security Identity & Access Management Analyst

Information Security Manager

Senior Third-Party Security Risk Analyst

Legal Third-Party Management and Information Security Risk Lead

Compliance Risk Management Officer

Canada Compliance Risk Management Sr. Analyst

Location:
Argentina

Category:
IT - Administration

Contract Type:
Not provided

Job Posted:
April 23, 2026