LOG IN
SIGN UP
Canary Wharfian - Online Investment Banking & Finance Community.
Sign In
or continue with e-mail and password
Forgot password?
Don't have an account?
Create an account
or continue with e-mail and password
By signing up, you agree to our Terms & Conditions and Privacy Policy.

Cyber Risk Specialist

ExperiencedNo visa sponsorship
Qube logo

at Qube

Proprietary Trading

Posted 5 days ago

No clicks

**Cyber Risk Specialist** at Qube Research & Technologies (QRT), a global, data-driven investment manager. Provide strategic risk guidance for security governance. **Key Responsibilities:** Manage information security risks, enhance policies, coordinate audits, ensure compliance, drive awareness, and generate insights. **Required Skills:** 5+ years in InfoSec, GRC, audit, strong knowledge of security frameworks, excellent communication, data literacy, and project management. **Experience with GRC platforms and exposure to cloud, financial services, or quantitative trading environments desirable.

Compensation
Not specified

Currency: Not specified

City
Not specified
Country
Not specified

Full Job Description

 

Qube Research & Technologies (QRT) is a global quantitative and systematic investment manager, operating in all liquid asset classes across the world. We are a technology and data driven group implementing a scientific approach to investing. Combining data, research, technology, and trading expertise has shaped our collaborative mindset, which enables us to solve the most complex challenges. QRTs culture of innovation continuously drives our ambition to deliver high quality returns for our investors.

As a Cyber Risk Specialist, youll provide strategic guidance across risk and governance remits within the security team. Youll collaborate with different teams and stakeholders across the business to ensure our security governance is robust, scalable, and deployable. This position has high visibility across the business and exposure to all parts of the trading lifecycle.

Your future role at QRT

  • Cyber Risk Management
    • Maintain and enhance the Information Security risk register as a live, decision-useful tool.
    • Work with stakeholders to assess, track, and manage risks across systems, processes, and third parties.
    • Develop clear, data-led risk narratives for leadership.
    • Track remediation actions and support risk-based prioritisation.
  • Governance and Policy
    • Maintain and improve security policies, standards, and supporting documentation.
    • Align internal requirements with relevant frameworks, regulations, and business needs.
    • Ensure documentation is clear, current, and accessible to technical and business stakeholders.
    • Support practical and scalable security governance.
  • Audit and Assurance
    • Coordinate external reviews, client assurance requests, regulatory enquiries, and internal audits.
    • Gather and validate evidence from technical and business teams.
    • Maintain assurance materials and evidence repositories.
    • Track findings and remediation actions through to closure.
  • Compliance and Control Effectiveness
    • Support control assurance and testing activities.
    • Monitor adherence to internal policies, contractual commitments, and external obligations.
    • Help map controls to relevant frameworks such as ISO 27001, NIST, SOC 2, and DORA.
    • Identify control gaps and support pragmatic remediation.
  • Training and Awareness
    • Contribute to targeted security awareness activities, particularly for technical teams.
    • Tailor security messaging for different audiences.
    • Track completion, engagement, and impact of awareness activities.
  • Reporting and Insight
    • Develop concise dashboards and reports for leadership.
    • Highlight trends, control health, emerging risks, and areas requiring attention.
    • Use data to support findings, prioritisation, and decision-making.

Your present skillset

  • 5+ years experience in information security, cyber risk, GRC, audit, assurance, or a related discipline.
  • Strong understanding of security frameworks and regulations such as ISO 27001, NIST, SOC 2, DORA, or similar.
  • Experience coordinating audits, assurance activity, regulatory reviews, or control assessments.
  • Strong written and verbal communication skills.
  • Experience working with cross-functional teams, including technology, legal, compliance, and business stakeholders.
  • Strong organisational skills and the ability to manage multiple workstreams.
  • Familiarity with GRC platforms such as Drata, Vanta, ServiceNow GRC, Archer, or similar.
  • Strong data literacy, including experience using dashboards, metrics, or raw data to support findings.
  • Confidence driving small projects or workstreams independently.
  • Desirable:
    • Experience in financial services, quantitative trading, investment management, or another highly technical environment.
    • Familiarity with cloud platforms, infrastructure, software development, or third-party technology risk.
    • Experience improving risk reporting, control testing, assurance workflows, or evidence management processes.
    • Understanding of operational resilience, third-party risk, or regulatory technology expectations.

QRT is an equal opportunity employer. We value diversity as essential to our success and are committed to creating an environment where employees can work openly, respectfully, and collaboratively. In addition to supporting professional achievement, QRT offers initiatives and programmes designed to help employees maintain a healthy work-life balance.

 

Cyber Risk Specialist

Compensation

Not specified

City: Not specified

Country: Not specified

Qube logo
Proprietary Trading

5 days ago

No clicks

at Qube

ExperiencedNo visa sponsorship

**Cyber Risk Specialist** at Qube Research & Technologies (QRT), a global, data-driven investment manager. Provide strategic risk guidance for security governance. **Key Responsibilities:** Manage information security risks, enhance policies, coordinate audits, ensure compliance, drive awareness, and generate insights. **Required Skills:** 5+ years in InfoSec, GRC, audit, strong knowledge of security frameworks, excellent communication, data literacy, and project management. **Experience with GRC platforms and exposure to cloud, financial services, or quantitative trading environments desirable.

Full Job Description

 

Qube Research & Technologies (QRT) is a global quantitative and systematic investment manager, operating in all liquid asset classes across the world. We are a technology and data driven group implementing a scientific approach to investing. Combining data, research, technology, and trading expertise has shaped our collaborative mindset, which enables us to solve the most complex challenges. QRTs culture of innovation continuously drives our ambition to deliver high quality returns for our investors.

As a Cyber Risk Specialist, youll provide strategic guidance across risk and governance remits within the security team. Youll collaborate with different teams and stakeholders across the business to ensure our security governance is robust, scalable, and deployable. This position has high visibility across the business and exposure to all parts of the trading lifecycle.

Your future role at QRT

  • Cyber Risk Management
    • Maintain and enhance the Information Security risk register as a live, decision-useful tool.
    • Work with stakeholders to assess, track, and manage risks across systems, processes, and third parties.
    • Develop clear, data-led risk narratives for leadership.
    • Track remediation actions and support risk-based prioritisation.
  • Governance and Policy
    • Maintain and improve security policies, standards, and supporting documentation.
    • Align internal requirements with relevant frameworks, regulations, and business needs.
    • Ensure documentation is clear, current, and accessible to technical and business stakeholders.
    • Support practical and scalable security governance.
  • Audit and Assurance
    • Coordinate external reviews, client assurance requests, regulatory enquiries, and internal audits.
    • Gather and validate evidence from technical and business teams.
    • Maintain assurance materials and evidence repositories.
    • Track findings and remediation actions through to closure.
  • Compliance and Control Effectiveness
    • Support control assurance and testing activities.
    • Monitor adherence to internal policies, contractual commitments, and external obligations.
    • Help map controls to relevant frameworks such as ISO 27001, NIST, SOC 2, and DORA.
    • Identify control gaps and support pragmatic remediation.
  • Training and Awareness
    • Contribute to targeted security awareness activities, particularly for technical teams.
    • Tailor security messaging for different audiences.
    • Track completion, engagement, and impact of awareness activities.
  • Reporting and Insight
    • Develop concise dashboards and reports for leadership.
    • Highlight trends, control health, emerging risks, and areas requiring attention.
    • Use data to support findings, prioritisation, and decision-making.

Your present skillset

  • 5+ years experience in information security, cyber risk, GRC, audit, assurance, or a related discipline.
  • Strong understanding of security frameworks and regulations such as ISO 27001, NIST, SOC 2, DORA, or similar.
  • Experience coordinating audits, assurance activity, regulatory reviews, or control assessments.
  • Strong written and verbal communication skills.
  • Experience working with cross-functional teams, including technology, legal, compliance, and business stakeholders.
  • Strong organisational skills and the ability to manage multiple workstreams.
  • Familiarity with GRC platforms such as Drata, Vanta, ServiceNow GRC, Archer, or similar.
  • Strong data literacy, including experience using dashboards, metrics, or raw data to support findings.
  • Confidence driving small projects or workstreams independently.
  • Desirable:
    • Experience in financial services, quantitative trading, investment management, or another highly technical environment.
    • Familiarity with cloud platforms, infrastructure, software development, or third-party technology risk.
    • Experience improving risk reporting, control testing, assurance workflows, or evidence management processes.
    • Understanding of operational resilience, third-party risk, or regulatory technology expectations.

QRT is an equal opportunity employer. We value diversity as essential to our success and are committed to creating an environment where employees can work openly, respectfully, and collaboratively. In addition to supporting professional achievement, QRT offers initiatives and programmes designed to help employees maintain a healthy work-life balance.