Information Security Policy Manager

Interactive Brokers Group, Inc. (Nasdaq: IBKR) is a global financial services company headquartered in Greenwich, CT, USA, with offices in over 15 countries. We have been at the forefront of financial innovation for over four decades, known for our cutting-edge technology and client commitment.

IBKR affiliates provide global electronic brokerage services around the clock on stocks, options, futures, currencies, bonds, and funds to clients in over 200 countries and territories. We serve individual investors and institutions, including financial advisors, hedge funds and introducing brokers. Our advanced technology, competitive pricing, and global market help our clients to make the most of their investments.

Barron's has recognized Interactive Brokers as the #1 online broker for six consecutive years. Join our dynamic, multi-national team and be a part of a company that simplifies and enhances financial opportunities using state-of-the-art technology.

This is Hybrid role (4 days in office /1 day remote)

About your Team:

The Information Security Policy Manager leads the continual development and improvement of information security policy at IBKR and ensures it is effectively integrated across IBKR's global Information Security Governance, Risk, and Compliance (GRC) function. This includes aligning policy to regulatory requirements and industry best practices, in consideration of IBKR's control environment and risk appetite.

 What will be your responsibilities within IBKR: 

• Enhance and extend IBKR’s information security policy library in alignment with regulatory requirements, business risk appetite, industry-accepted risk frameworks, in consideration of IBKR’s control environment.
• Evolve IBKR’s capability to demonstrate compliance with applicable cybersecurity frameworks, regulatory requirements, and laws through policy mapping and gap analysis.
• Drive and measure policy compliance through the development of, and mapping to, appropriate controls and testing procedures, in partnership with the Information Security Controls Manager.
• Evaluate security controls, identify opportunities for improvement, and communicate constructive recommendations.
• Support security-related external assessments, audits, and regulatory examinations by providing evidence of compliance.
• Other responsibilities related to the GRC function, per demonstrated aptitude.

 What required skill’s you need:

• 7+ years of experience in information / cyber security experience, including 3+ years developing and managing information security policies in a regulated industry (preferably financial services) and 3+  years hands-on, technical cybersecurity roles.
• Fluent understanding of regulatory requirements affecting cybersecurity, including DORA, SEC, FFIEC, and common regulations issued in Europe (EBA) and APAC (SFC, MAS) – and how multi-national financial services companies address them.
• Working familiarity with common security frameworks, such as NIST CSF.
• Proven ability to write clear, actionable policies addressing complex regulatory and technical requirements, grounded in industry accepted practices and risk management concepts, and based on existing controls and technology environments.
• Experience as lead responder to regulatory examinations, audit requests, and client due diligence questionnaires related to policy and compliance a plus.
• Experience working with GRC (Governance, Risk, and Compliance) tooling a plus.
• Bachelor’s degree in Information Security, Computer Science, Information Technology or a related field, or equivalent experience
• CISM certification a plus.

 To be successful in this position, you will have the following:

• Strong critical thinking, analytical, organizational, time management, and writing and editing skills – all with attention to detail.
• Track record of building bridges with technology practitioners and translating complex technical concepts into simple, accessible language for business audiences.
• A self-motivated, open, collaborative, client-centric, consensus-building problem-solving mentality.
• Ability to navigate ambiguity through structured thinking and exercise good judgment when solving problems with incomplete information.