IT Security Consultant

Murex is a global fintech leader in trading, risk management and processing solutions for capital markets.
Operating from our 19 offices, 3 400 Murexians from over 65 different nationalities ensure the development, implementation and support of our platform which is used by banks, asset managers, corporations and utilities, across the world.
Join Murex and work on the challenges of an industry at the forefront of innovation and thrive in a people-centric environment. You'll be part of one global team where you can learn fast and stay true to yourself.
Team
Join Murex's Information Security team and help strengthen the cyber resilience of a global fintech serving some of the world's leading financial institutions. In this role, you will turn governance, risk and compliance into practical security outcomes: clear requirements, measurable controls, effective remediation plans and trusted guidance for business and technology teams.
Your role
Support the definition, implementation and monitoring of Murex's information security governance framework, with a focus on compliance, risk follow-up, control effectiveness, third-party security, and security awareness.
Your main mission will be:

• Shape and continuously improve Murex's information security governance framework, translating policies, standards and control requirements into actionable practices for global teams.
• Drive compliance monitoring by defining evidence expectations, tracking remediation progress and ensuring security requirements are consistently understood and applied.
• Design and improve operating procedures that make control execution, compliance monitoring, security reporting and posture management scalable and reliable.
• Lead or coordinate security assessments, maturity reviews, audit preparation, compliance checks and follow-up of identified gaps across business, IT and security stakeholders.
• Build meaningful security and compliance dashboards that give management a clear view of risks, maturity, control effectiveness and remediation priorities.
• Contribute to Third-Party Risk Management by reviewing supplier assessments, supporting procurement activities and following up on remediation actions with vendors and internal owners.
• Support AI governance initiatives by helping define practical security guardrails, reviewing AI use cases and monitoring risks linked to AI tools, services and autonomous capabilities.
• Act as a trusted security advisor for business and IT teams by qualifying requests, documenting risk-based recommendations and ensuring timely follow-up.
• Partner with IT, Legal, Procurement, Product and business stakeholders to embed security requirements into projects, operations, exceptions and continuous improvement plans.
• Support internal and external audits, client security questionnaires and compliance assessments with clear answers, relevant evidence and sustainable remediation plans.
• Promote a strong security culture through targeted awareness initiatives, practical guidance, communication material and training content adapted to different audiences.

What we are looking for
You have 5 to 7 years of experience in information security, with exposure to governance, risk management, compliance, audit, security awareness, advisory or control monitoring activities. You enjoy making security requirements understandable, measurable and actionable for diverse stakeholders.
Your strengths

• Strong understanding of information security governance, risk and compliance frameworks, with the ability to turn them into pragmatic operational requirements.
• Hands-on experience designing and improving security procedures, compliance workflows, control guidance and evidence collection practices.
• Experience performing or coordinating security assessments, control testing, audit preparation and remediation follow-up.
• Ability to structure complex topics, connect technical and business perspectives, and help stakeholders make informed risk-based decisions.
• Excellent written and verbal communication skills, with the ability to produce clear procedures, assessment outcomes, remediation plans and management-level reporting.
• Good knowledge of key security domains such as vulnerability management, incident response, identity and access management, third-party security and control monitoring.
• Exposure to Third-Party Risk Management, including supplier assessments, security requirements, remediation tracking and collaboration with Procurement or vendor owners.
• Interest in AI governance topics, including AI-related risk assessment, acceptable use, security guardrails and collaboration with Legal, IT, Procurement or business teams.
• Structured mindset for handling security requests and exceptions with traceability, prioritization, clear communication and timely follow-up.
• Collaborative attitude, curiosity and the ability to build trusted relationships while promoting security as a business and technology enabler.
• Relevant certifications such as CISSP, CRISC, CISM, ISO 27001 Lead Implementer or Lead Auditor would be appreciated.