Information Security Policy Manager

Interactive Brokers Group, Inc. (Nasdaq: IBKR) is a global financial services company headquartered in Greenwich, CT, USA, with offices in over 15 countries.

We have been at the forefront of financial innovation for over four decades, known for our cutting-edge technology and client commitment.

IBKR affiliates provide global electronic brokerage services around the clock on stocks, options, futures, currencies, bonds, and funds to clients in over 200 countries and territories.

We serve individual investors and institutions, including financial advisors, hedge funds and introducing brokers.

Our advanced technology, competitive pricing, and global market help our clients to make the most of their investments.

Barron's has recognized Interactive Brokers as the #1 online broker for six consecutive years.

Join our dynamic, multi-national team and be a part of a company that simplifies and enhances financial opportunities using state-of-the-art technology.

This is Hybrid role (4 days in office /1 day remote)

About your Team:

The Information Security Policy Manager develops, maintains, and communicates IBKR's information security policies aligned to regulatory requirements, industry best practices, and IBKR’s control environment and risk appetite.

This role is responsible for IBKR’s formal information security policy library, ensuring IBKR’s security program is supported by well-considered policy mandates.

What will be your responsibilities within IBKR:

• Maintain and extend IBKR’s information security policy library to align with regulatory requirements, business risk appetite, industry-accepted risk frameworks, and IBKR’s control environment.
• Coordinate and drive the development, review, and update of information security policies and standards based on identified need and defined maintenance intervals.
• Map IBKR’s security policies to, and analyze gaps against, applicable risk and regulatory frameworks and laws, such as DORA, FFIEC, NIST CSF.
• Support security-related external assessments, audits, and regulatory examinations by providing evidence of compliance.
• Partner with the Information Security Controls Manager to ensure policies are supported by appropriate controls and testing procedures.
• Evaluate security controls, identify opportunities for improvement, and communicate constructive recommendations.