Senior Associate, Cybersecurity

ABOUT INNOCAP

Innocap is the leading Dedicated Managed Account Platform (DMAP) globally, providing institutional allocators with a superior way to structure, access, and oversee their alternative investments. With over US$135 billion on the platform and more than 570 employees across the globe, we are transforming how allocators access and manage alternative investments.

Powered by our people, processes and purpose‑built technology, Innocap is seeking forward-thinking individuals to join us on our exciting journey. At Innocap, you won't just manage what’s here today. You’ll build what comes next. Here, careers are about building, not maintaining.

We give our people the freedom to think boldly, move quickly, and create real impact with less red tape. Driven by transformation, trust and collaboration, we never settle for the status quo and are constantly finding better ways to serve our clients and actively shape the future of the investment industry.

At Innocap, your work makes a difference every day – and helps build what’s next for our clients, the industry, and your career.

Because the future doesn’t build itself. We do.

ABOUT THE ROLE

We are looking for a Senior Associate, Cybersecurity to join our Cybersecurity team in Poland. You will be our day-to-day internal partner to our 24x7 Managed Security Service Provider (MSSP). You will be the first internal responder to security escalations during European hours and contain routine incidents using approved playbooks.

You will verify the remediation of vulnerabilities the MSSP finds through CVE detection and cloud security posture management (CSPM). That means monitoring findings assigned to IT Operations and development teams, and tracking them to closure. You will also oversee the application code scanning our DevOps teams run with SAST and DAST tools, making sure scans happen and findings get fixed.

Beyond operations, you will run access reviews across our Microsoft Entra ID environment and lead evidence collection for our SOC 1 and SOC 2 Type II audits. You will prepare cybersecurity reports, including ICT security and incident reporting under DORA, and help answer client due-diligence questionnaires. You will also be a go-to contact for colleagues’ cybersecurity questions.

This is a hands-on role with real ownership in a small team. You will work closely with the Toronto-based Cybersecurity Manager and Specialist, and with IT Operations and development teams across North America, Europe and India. Your work will directly shape our audit results, our responses to institutional clients, and our regulatory readiness.

PRIMARY QUALIFICATIONS & SKILLS

• Minimum 5 years in cybersecurity, ideally covering both security operations and governance, risk and compliance.
• Hands-on experience with the Microsoft security stack: Sentinel (including KQL), Defender XDR, Entra ID (Conditional Access, Privileged Identity Management), Intune and Purview.
• Experience working with or overseeing an MSSP or Security Operations Centre.
• Experience managing vulnerability remediation, including CVE prioritization and cloud security posture findings, ideally in Microsoft Azure.
• Familiarity with application security testing tools (SAST, DAST, software composition analysis) and working with DevOps teams to get findings fixed.
• Experience supporting SOC 2, ISO/IEC 27001 or similar audits, including evidence collection and control testing.
• Working knowledge of DORA and GDPR, including ICT security and incident reporting; financial services or other regulated-industry experience preferred.
• A relevant certification such as Microsoft SC-200/AZ-500, CompTIA Security+ or CySA+, or ISC2 SSCP / CISSP. ISO/IEC 27001 Lead Implementer or Lead Auditor is a plus.
• Strong organization and follow-through, and the ability to get other teams to act without direct authority.
• Clear written communication, including reports for management and plain-language answers to employee questions.
• Fluent English; Polish is an asset.

#LI-Hybrid

Innocap is an equal opportunity employer. We are dedicated to hiring diverse talent and fostering an inclusive, equitable, and people-first culture where everyone feels valued, respected, and empowered to contribute fully – regardless of their background. With employees across the globe, we firmly believe that the unique perspectives and strengths of our people help us grow stronger and allow us to better serve our clients.

If you require accommodation at any stage during your application process, please let us know.  

Innocap's Global Privacy Notice