Information Security Analyst

Multitude is a listed European FinTech company, offering digital lending and online banking services to consumers, small and medium-sized businesses, and other FinTechs. The services are provided through three independent business units, which are served by our internal Banking-as-a-Service Growth Platform. Multitude's business units are consumer banking (Ferratum), business banking (CapitalBox) and wholesale banking (Multitude Bank).

Multitude Group employs over 700 people in 25 countries and offers services in 16 countries, achieving a combined turnover of 212 million euros in 2022. Multitude was founded in Finland in 2005 and is listed on the Prime Standard segment of the Frankfurt Stock Exchange under the symbol 'FRU'.

We are hiring an Information Security Analyst to work in our Information Security squad to strengthen the organisation's second line and security risk posture. You will monitor our systems and networks for security events, vulnerabilities and incidents through various systems (e.g. SIEM), services and tools (e.g. vulnerability scanning and penetration testing). In addition, you will be carrying out risk assessments of internal systems, networks, assessing security risks in third party service provision as well as assessing the physical security of the Multitude Group.

To do well in this role, you should be detail-oriented and able to juggle multiple issues efficiently and effectively. You should be able to think outside the box to analyse security issues and possess a sound information security background. Previous experience in a similar role in a financial services institution is an asset.

The Information Security Analyst will be:

• Analysing and responding to security threats from various security platforms and technologies.
• Responsible for conducting research and evaluating technical and all-source cyber intelligence to develop in-depth assessments of threats to the organisation's networks, systems, users, and data.
• Serving as liaison and point of contact for new issues and vetting
• Creating technical assessments and cyber threat profiles of current events based on inventive collection and research to enable advanced threat intelligence
• Developing and maintaining analytical procedures to meet changing requirements and enable more strategic detections
• Staying abreast of innovative business and technology trends in IT security, risk, and controls
• Advising leadership on technology initiatives that support latest trends in IT security, risk and controls
• Ensuring effective execution of the risk management framework by managing relationships with key stakeholders within strategic business groups and technology
• Verifying that information security risks are appropriately mitigated and leads multiple stakeholders in agreement on appropriate solutions/controls
• Responsible for identifying applicable regulatory risks from changes or additions to regulatory guidance and requirements
• Providing expertise for resolution and risk mitigation.
• Championing information security with tribes, squads and chapters in the organisation to provide security training, increase security awareness and/or discuss potential security issues and scenarios.
• Developing, tracking, and reporting on Key Risk Indicators (KRIs) for information security
• Monitoring, tracking, and reporting mitigation and resolution of information security risks
• Performing process-level walkthroughs, control testing, etc. for the identification and assessment of IT risks and controls
• Effectively communicating key risks, findings, and recommendations for improvement with key stakeholders.
• Performing any other duties that may be assigned from time to time.

Expected skills and experience:

• A minimum of bachelor's degree in Computer Science, Cyber Security, Information Technology, or a similar technical degree
• Minimum 4 years of generic IT professional experience, of which minimum 2 years of relevant professional experience in Information Security Management.
• Practical expertise with EDR, SIEM and SOAR
• Experience with Linux, Windows and Network Operating Systems required.
• Familiarity with Microservice architecture, event sourcing, distributed systems and asynchronous communication is considered an asset.
• Basic knowledge of Kafka, Docker, Kibana, New Relic, Mongo, Elasticsearch, Oauth2, Kubernetes, terraform is considered an asset.
• Good programming and scripting skills (Python, Bash, PowerShell).
• One or more of the following qualifications is desirable (CISSP, CISM, CISA, CRISC, ITIL V3, ISO27001 Lead Auditor).
• Be fluent in English and have strong oral and written communication skills to work effectively with employees at all levels of the organisation.
• Being comfortable driving conversations with teams with varied backgrounds and purpose, such as conversing with Risk Business Tribes and Squads, Technology Squads, Vendors and Senior Management. It is also important that you are receptive to guidance from your Chapter/Squad Lead and able to effectively communicate results to the Squad Lead.
• You must be highly organised with ability to prioritise and multi-task, as well as able to thrive in a fast-paced environment
• Excellent problem-solving skills and the ability to be highly productive, both working alone and as part of a team.

We offer:

• Working in a fast-growing international finance company
• Friendly atmosphere and supportive team
• Flexible working hours
• Possibility to work from home and from the office
• Opportunities for growth, the realization of own ideas and further training
• Access to LinkedIn learning with over 8000 courses
• Professional and attentive environment
• Competitive Fringe benefits
• Health insurance
• 4 Extra paid days
• Office full of snacks, gaming room, company events and other perks which are expanded from time to time based on employees needs and market trends.

The salary range is from 2600 EUR gross monthly but will be higher if you are a senior candidate. Our final offer to you will be set up fairly, considering your skills and experience.

Kindly note that by proceeding you will make your personal data provided available to us for the purposes of recruitment activities. By proceeding, you confirm that you have read and accepted our Recruitment Privacy Policy.