Cybersecurity and Compliance Analyst, eToro
Social trading & investment network
Job no longer available
Social trading & investment network
1001+ employees
Job no longer available
1001+ employees
Company mission
To empower people to grow their knowledge and wealth as part of a global community of investors.
Role
Who you are
- Bachelor’s degree in Cybersecurity, Information Technology, or a related field (or equivalent experience)
- 3+ years of experience in cybersecurity, with a focus on GRC, risk management, and security architecture
- Good knowledge of regulatory requirements (e.g., GDPR, NYDFS, PCI-DSS, NIST CSF, SOC 2)
- Strong written communication skills with an interest in policy development
- Understanding of cybersecurity frameworks (e.g., NIST, ISO) and data privacy regulations (e.g., GLBA, CCPA)
- Strong organizational skills and the ability to manage multiple tasks in a remote environment
- Experience in identifying and understanding application security issues such as findings from penetration tests and Bug Bounty programs, code scans
- Relevant certifications (CISSP, CISM, CISA, CRISC, CCSP) are highly desirable
What the job involves
- We are looking for a Cybersecurity and Privacy Compliance Analyst to enhance our security governance, risk management, and compliance efforts
- In this role, you will develop and maintain security policies, assess cybersecurity risks, conduct vendor security reviews, and support regulatory compliance initiatives
- You will work closely with cross-functional teams to strengthen the organization’s security posture, ensure adherence to industry standards, and mitigate emerging risks
- This is an exciting opportunity for a security professional looking to expand their expertise in a dynamic and fast-paced environment
- Identify, assess, and mitigate cybersecurity risks across enterprise systems, cloud platforms, and applications
- Design and oversee security architecture to support business objectives while ensuring compliance and risk mitigation
- Collaborate with engineering teams to embed security-by-design principles and to ensure security best practices in cloud, application, and infrastructure security
- Communicate and elucidate application security and cloud security issues identified through penetration tests and Bug Bounty programs, ensuring their remediation is tracked and managed
- Proactively detect and address potential product security issues within the assigned area of responsibility, ensuring timely and effective resolution
- Conduct security reviews and risk assessments for new technology deployments
- Develop strategies for secure cloud adoption (Azure, AWS)
- Write and maintain cybersecurity and privacy policies and procedures to ensure compliance with industry standards and regulations
- Assist in executing and improving business continuity plans and testings
- Help develop and deliver security and privacy training programs; assist with phishing simulations and awareness campaigns
- Work alongside the BISO and IT department to support cybersecurity and privacy compliance efforts
- Conduct security assessments of vendors, partners, and third-party service providers
- Develop and implement a third-party risk management framework to align vendor security assessments with regulatory requirements
- Stay updated on emerging threats, regulatory changes, and cybersecurity trends to improve GRC strategies
- Support the Compliance team for various initiatives such as annual testing, responding to regulatory inquiries and examination/audit requests, management of audit/exam remediation, regulatory reporting (e.g. data breach, cyber attack event, etc.), and monitoring for regulatory changes and management of necessary program enhancements
- Take on additional tasks, projects, or initiatives as needed to support evolving business priorities and contribute to the overall success of the organization
Our take
Investing used to be accessible only to financial experts, but due to advancements in open banking and fintech software development, the average person can now invest from their smartphone. However, this also makes users vulnerable to the high-risk nature of investing, resulting in a demand for easy-to-understand investment education.
eToro provides a social trading and investment platform, facilitating investment in the stock market, ETFs and index funds, cryptocurrencies and NFTs through a mobile application. In addition to providing these features, the platform also features a community-focused investment discussion board, a robo-adviser tool called CopyTrader, as well as investment education resources.
Whilst it is undeniable that the investment platform market has become highly saturated in the last few years, eToro has taken the unique angle of combining its trading platform with tools and resources that help to educate its users. Through this approach, the company aims to increase accessibility to smart investment strategies, whilst reducing the risk associated with investing as a non-expert.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
-5% employee growth in 12 months
Company
Funding (last 2 of 11 rounds)
Mar 2023
$250m
GROWTH EQUITY VC
Apr 2018
$50m
SERIES E
Total funding: $489.9m
Company benefits
- 🌴25 days annual leave - plus bank holidays
- 🏠 Flexible and Hybrid Working – 1-2 days a week in the office and working remotely the rest of the time
- 🎉 New starter welcome pack – (eToro hoodie, notepad, socks & other swag to welcome you to the family)
- 💰£10 (after tax!) added on a your eToro money card every working day
- 🕒 Occasional rewards such as “recharge days” (e.g. 3 extra paid holiday days in 2022) to help with work/life balance
- 🤑 $1000 in trading credits on the day you start
- 💰 Contributory Company Pension
- 📚$250 self development budget, with scope to increase where suitable
- 🩺Private Medical Insurance
- 🏥Income protection & life insurance
- 💻Company laptop, plus dual monitors for home working
- 🎉 Regular socials, events and rewards to celebrate our continued growth
- 🎂 Birthday payment of £50 – and an additional £100 winter holiday payment
Company HQ
Canary Wharf, London, UK
Leadership
Yoni Assia
(Founder & CEO)Board Member at Meitav Dash. Co-Founder and former Development Manager of WiTech Communications' CDRide.
Share this job
View 2 more jobs at eToro