Your focus is to own and strengthen our security by reducing real operational risks. You don’t wait for audits to expose gaps, you’re proactive and hands-on. We already have ISO27001 and SOC2; your role is to take them further making our security stronger, more practical, and truly effective.You own the operational side of our security program across engineering, IT, and business. You will also:
GRC Jobs in Amsterdam.
All active GRC roles based in Amsterdam.
Total jobs
8
positions indexed
Companies
6
actively hiring
New today
0
last 24 hours
Worldwide Remote
0
remote listings
8
positions
Data Protection Lead
Nebius
Amsterdam, Netherlands
Corporate and Cyber Security
1d ago
Risk Manager
Nebius
Amsterdam, Netherlands
Legal
1d ago
Product Manager - Security
Nebius
Amsterdam, Netherlands;...
Technology Product
1d ago
Business Operations, Regulatory & Compliance
Gigs
Europe
Connectivity
5d ago
Information Security Risk Analyst
Optiver
Amsterdam, North Holland...
Risk
1w ago
Quantitative Researcher Internship | Amsterdam
Graviton Research Capital LLP
Amsterdam, North Holland...
Quantitative Trading
1w ago
Junior Security Operations Engineer
Telnyx
Dublin; Ireland ; Amster...
Business Operations
1w ago
Security Specialist
Workwize
Remote EU/UK
Tech
1mo ago
Pick a job to read the details
Tap any role on the left — its description and apply link will open here.
About Nebius:
Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure.
Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI.
Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D.
The Role
We are seeking an experienced Data Protection Lead to join the Cyber Security organization, reporting to the Head of Security Engineering under the CISO.
This role is responsible for leading the organization’s data protection domain, with a focus on data discovery, classification, and data loss prevention (DLP) across corporate and cloud environments.
You will define and drive data protection strategy, implement controls to protect sensitive data across its lifecycle, and ensure visibility into where data resides and how it is used. The role requires close collaboration with Security, IT, Engineering, Product, and GRC teams to reduce data exposure risks and enforce strong data governance practices.
Key Responsibilities
- Lead and own the organization’s data protection domain, including strategy, standards, and implementation
- Drive data discovery initiatives to identify sensitive data across databases, SaaS applications, endpoints, and cloud environments
- Define and implement data classification frameworks, labeling standards, and data handling policies
- Design and implement data loss prevention (DLP) controls across endpoints, email, SaaS, network, and cloud platforms
- Ensure protection of sensitive data across its lifecycle, including storage, processing, and transfer
- Lead implementation and optimization of data security technologies (e.g., DLP, DSPM, CASB/SSE, data classification tools)
- Define and enforce data access governance, including least privilege and monitoring of sensitive data access and usage
- Monitor and investigate data-related risks, exposures, and policy violations in collaboration with SOC and Security teams
- Conduct risk assessments and identify gaps in data protection controls across systems and business processes
- Support compliance and regulatory requirements (e.g., GDPR, ISO 27001, SOC 2) related to data security and privacy
- Collaborate with Engineering, IT, Product, and GRC teams to embed data security controls into systems and workflows
- Maintain documentation, standards, and guidelines for data security practices
Required Skills & Experience
- 6+ years of experience in cyber security, with a focus on data security, data protection, or information security
- Hands-on experience with data discovery, classification, and DLP solutions
- Strong understanding of data lifecycle management and data security principles
- Experience securing data across cloud environments and SaaS platforms
- Experience implementing and managing data classification and labeling frameworks
- Strong understanding of identity and access management and data access controls
- Experience working with data security tools (e.g., Microsoft Purview, Netskope, Symantec DLP, etc.)
- Experience working cross-functionally with Security, IT, Engineering, Product, and GRC teams
- Strong analytical and problem-solving skills
- Excellent written and verbal communication skills in English
- Strong analytical and problem-solving mindset
- Ability to communicate data security risks clearly to technical and non-technical stakeholders
- Proactive, detail-oriented, and ownership-driven
- Comfortable working in cross-functional teams in a dynamic environment
Nice to Have
- Experience leading or building data security or DLP programs in a growing organization
- Familiarity with DSPM (Data Security Posture Management) tools
- Experience with CASB / SSE platforms (e.g., Netskope, Zscaler)
- Knowledge of privacy and regulatory frameworks (GDPR, ISO 27001, SOC 2, etc.)
- Relevant certifications such as CISSP, CISM, or CDLP
- BSc in Computer Science, Information Security, or a related field
Benefits & Perks:
- Competitive compensation
- Career growth and learning opportunities
- Flexibility and work-life balance
- Collaborative and innovative culture
- Opportunity to work on impactful AI projects
- International environment and talented teams
What's it like to work at Nebius:
Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI
Equal Opportunity Statement:
Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law.
Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire.
If you need accommodations during the application process, please let us know.
Ready to apply?
Apply to Nebius
Nebius
View all jobs →
About Nebius:
Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure.
Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI.
Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D.
The role
The Risk Manager will serve as a key member of Nebius's Risk Management function, reporting directly to the Head of Risk within the Legal Department. This role is central to the day-to-day execution and continuous improvement of Nebius's enterprise risk management (ERM) framework, with a particular focus on risk identification, monitoring, and the maintenance and evolution of the company-wide risk register.
Operating within a rapidly growing, global AI-infrastructure organisation, the Risk Manager will act as a critical liaison between the Risk Management function and Nebius's business units — including Finance, IT, Security, HR, Operations, Compliance, Procurement, Infrastructure, and Commercial teams. The role requires consistent, proactive engagement with business function leaders to ensure that risks are surfaced, assessed, documented, and tracked in a timely and structured manner.
This is an operationally focused, high-visibility role that demands strong analytical rigour, clear communication skills, and the ability to build trusted relationships across the organisation. The Risk Manager will play an essential part in enabling Nebius to scale responsibly while balancing innovation, speed, and regulatory expectations.
Your responsibilities will include:
Risk Identification & Assessment
The Risk Manager will lead and coordinate ongoing risk identification activities across all business functions, including the execution of periodic update of risk surveys and leading risk assessment workshops. This includes partnering with functional leaders to systematically identify emerging, operational, strategic, and regulatory risks relevant to Nebius's operations, products, and markets. The role holder will ensure that risk assessments are consistent, evidence-based, and aligned with the company's risk appetite and strategic priorities.
Risk Register Management & Monitoring
A core responsibility of this role is the ownership and day-to-day maintenance of Nebius's company-wide risk register. The Risk Manager will ensure that the register is continuously updated to reflect new and evolving risks, changes in risk ratings, the status of mitigation actions, and shifts in the business or regulatory environment. The role holder will establish and maintain a structured cadence of risk register reviews with risk owners and functional stakeholders the Risk Manager will drive remediation and follow-up with accountable parties where needed
Business Function Liaison & Cross-Functional Engagement
The Risk Manager will serve as the primary point of contact between the Risk Management function and Nebius's business units on all matters relating to risk identification, assessment, and monitoring. This involves building and sustaining strong working relationships with stakeholders in Legal, Security, Finance, IT, HR, Operations, Compliance, Procurement, Infrastructure, and Commercial teams. The role holder will facilitate regular risk reviews and check-ins with functional leaders, ensuring that risk information flows efficiently between the business and the central risk function
Risk Reporting & Insights
The Risk Manager will contribute to the preparation of clear, concise executive-level risk reports, dashboards, and presentations for the Head of Risk, the General Counsel, and senior leadership. This includes translating complex risk data into actionable insights and recommendations that support strategic decisions, new initiatives, market entry, and product launches.
Operational, Technology & Security Risk Support
The Risk Manager will work in collaboration with the Infrastructure and Technology departments, to support the assessment and monitoring of cybersecurity and information security risks, infrastructure, cloud, and AI platform risks.
We expect you to have:
- 4–7 years of experience in risk management, compliance, internal audit, or a closely related discipline, preferably within technology, AI, cloud infrastructure, or highly regulated environments
- Solid working knowledge of enterprise risk management frameworks such as COSO ERM or ISO 31000
- Demonstrated experience in maintaining and updating enterprise-level risk registers and conducting structured risk assessments
- Experience working in multi-entity, international organisations with exposure to complex regulatory landscapes
- Proven ability to engage and collaborate cross-functionally with stakeholders across a range of business functions
- Ability to communicate risk information clearly and effectively to both technical and non-technical audiences
- Strong analytical skills, excellent written and verbal communication abilities, and a high degree of integrity, discretion, and sound judgement
- Ability to manage multiple priorities and iterate quickly in a fast-paced environment
It will be an added bonus if you have:
- Exposure to AI governance, data privacy, cybersecurity, or emerging technology risks
- Experience contributing to Board or Audit Committee risk reporting materials
- Background in fast-scaling, high-growth, or pre-IPO environments
- Professional certifications in risk management (such as IRM Certificate/Diploma, CRISC, or equivalent)
- Familiarity with risk management tools and platforms (e.g., GRC software) and experience with data visualization or dashboard reporting
Competencies:
Analytical Rigour & Attention to Detail: Demonstrates a methodical, thorough approach to risk identification, assessment, and documentation. Maintains accuracy and completeness in the risk register and in all risk reporting outputs. Applies structured analytical methods to evaluate complex risk scenarios and translate findings into clear, evidence-based conclusions.
Cross-Functional Collaboration: Builds and maintains strong, trust-based relationships with colleagues across the organisation, from operational teams to senior functional leaders. Engages proactively with business units to surface risks and ensure that the risk function remains closely connected to the realities of the business.
Communication & Influence: Communicates risk information with clarity, precision, and appropriate context, tailoring messages to different audiences — from technical teams to executive leadership. Able to influence stakeholders and promote risk awareness without direct authority.
Problem Solving & Execution: Breaks down complex, ambiguous risk scenarios into structured, actionable plans. Balances rigour with pragmatism, ensuring that risk processes are fit for purpose without being overly burdensome.
Autonomy & Judgement: Operates effectively with a degree of independence, exercising sound judgement in prioritising risks and escalating issues appropriately to the Head of Risk. Comfortable working in ambiguous situations and adapting quickly to changing circumstances in a fast-paced environment.
Risk Culture Champion: Actively supports the embedding of risk awareness and ownership into day-to-day decision-making across Nebius. Promotes a pragmatic, positive approach to risk management that enables rather than constrains the business.
Integrity & Professionalism: Upholds the highest standards of integrity, discretion, and ethical conduct in all aspects of the role. Handles sensitive and confidential information with care and professionalism.
Benefits & Perks:
- Competitive compensation
- Career growth and learning opportunities
- Flexibility and work-life balance
- Collaborative and innovative culture
- Opportunity to work on impactful AI projects
- International environment and talented teams
What's it like to work at Nebius:
Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI
Equal Opportunity Statement:
Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law.
Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire.
If you need accommodations during the application process, please let us know.
Ready to apply?
Apply to Nebius
Nebius
View all jobs →
Product Manager - Security
Nebius
·
Amsterdam, Netherlands; Berlin, Germany; Finland; London, United Kingdom; Prague, Czech Republic; Remote - Europe
Share this job
About Nebius:
Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure.
Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI.
Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D.
The role
We’re looking for a Security Product Manager to join our team. Security Product Manager is responsible for conveying the company’s security strengths to customers, partners and the market at large. This includes participating in relevant security partnership initiatives, influencing security positioning and branding, and working closely with internal teams to ensure company’s security posture and security products is communicated effectively to all stakeholders. By combining expertise in compliance requirements with a customer-centric approach, Security Product Manager helps position security as a competitive advantage rather than just an internal obligation.
Your responsibilities will include:
1. Product Management
- Define the vision and roadmap for Nebius’ security products.
- Owning the ideation, postmortem, prioritization, backlog, and customer feedback processes.
- Guiding new features, systems and services from inception to launch, while keeping customers at the center of everything.
2. Customer-facing communications
- Lead public-facing communications around security updates or changes in compliance status.
- In the event of a security incident, coordinate user messaging (email notifications, press releases, FAQs) with support from the Head of Security Products and CISO.
- Gather user feedback on user experience and security to guide continuous improvements.
3. Competitive analysis and market research
- Conduct ongoing research on industry benchmarks, emerging security standards and technologies, and competitor certifications.
- Identify gaps and opportunities in organization’s product security posture; propose strategic initiatives that differentiate the company’s security story in the market.
- Stay informed about new regulations or frameworks that may influence future product certifications or transparency requirements (e.g., privacy laws, data sovereignty standards).
4. Certification and audit support, service ownership
- Collaborate with the CISO office to gather technical evidence or make necessary product enhancements that satisfy certification requirements.
- Take ownership of some security-related services of Cloud platform.
- Track and maintain a certification roadmap (ISO 27001, SOC 2, HIPPA, etc.), working closely with CISO, GRC & Compliance, Corporate Security departments. Communicate timelines, goals and status updates to leadership and sales representatives.
5. Cross-functional collaboration
- Coordinate with multiple Product Managers to align security goals with other product roadmaps, ensuring a consistent narrative between product security and external messaging.
- Work with Platform Security, GRC & Corporate Security and legal teams to gather essential information for security products enhancements (e.g., penetration test summaries, compliance reports).
- Work with Customer-facing teams to address client inquiries about security posture and guide them on using security features optimally.
We expect you to have:
- 3+ years of Product Management or Program Management experience with a focus on security initiatives.
- Basic knowledge of compliance frameworks (e.g., SOC 2, ISO 27001, GDPR) and familiarity with how they translate into business value.
- Proven ability to communicate technical concepts in a clear, customer-friendly manner (e.g., writing content, speaking at webinars or conferences).
- Stakeholder management skills to align with other Product Managers, CISO staff, engineering, marketing, and customer-facing teams.
- Analytical mindset: comfortable defining success metrics (e.g., security feature adoption, NPS around trust, certification progress) and making data-driven decisions.
- Project management skills: demonstrated ability to manage inter-team collaboration within company-wide projects, ensuring timely delivery of cross-functional tasks and alignment with compliance goals.
It will be an added bonus if you have:
- Certifications such as CISSP, CISM, or PMP; prior experience in regulated industries; prior experience working for Cloud Service Provider.
About Nebius
Nebius AI is an AI cloud platform with one of the largest GPU capacities in Europe. Launched in November 2023, the Nebius AI platform provides high-end, training-optimized infrastructure for AI practitioners. As an NVIDIA preferred cloud service provider, Nebius AI offers a variety of NVIDIA GPUs for training and inference, as well as a set of tools for efficient multi-node training.
Nebius AI owns a data center in Finland, built from the ground up by the company’s R&D team and showcasing our commitment to sustainability. The data center is home to ISEG, the most powerful commercially available supercomputer in Europe and the 16th most powerful globally (Top 500 list, November 2023).
Nebius’s headquarters are in Amsterdam, Netherlands, with teams working out of R&D hubs across Europe and the Middle East.
Nebius AI is built with the talent of more than 500 highly skilled engineers with a proven track record in developing sophisticated cloud and ML solutions and designing cutting-edge hardware. This allows all the layers of the Nebius AI cloud – from hardware to UI – to be built in-house, distictly differentiating Nebius AI from the majority of specialized clouds: Nebius customers get a true hyperscaler-cloud experience tailored for AI practitioners. We’re growing and expanding our products every day.
If you’re up to the challenge and are excited about AI and ML as much as we are, join us!
Benefits & Perks:
- Competitive compensation
- Career growth and learning opportunities
- Flexibility and work-life balance
- Collaborative and innovative culture
- Opportunity to work on impactful AI projects
- International environment and talented teams
What's it like to work at Nebius:
Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI
Equal Opportunity Statement:
Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law.
Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire.
If you need accommodations during the application process, please let us know.
Ready to apply?
Apply to Nebius
Nebius
View all jobs →
About Gigs
At Gigs, we're building the operating system for mobile services—a platform that lets tech companies embed global connectivity into their products effortlessly.
Just as Stripe lets any business add a payment button in seconds, Gigs empowers platforms to weave in connectivity—bridging the traditional world of telecom with modern tech. From fintechs launching mobile services to HR platforms offering work phone plans, we automate provisioning and remove telecom complexity.
Our team of around 100 people across the US and Europe, backed by nearly $100 million in funding from Ribbit Capital, Google, and Y Combinator. As one of the fastest-growing tech companies, bringing together early-stage engineers, product builders, and business athletes from companies like Stripe, Airbnb, and Shopify. We’re tackling deep technical and regulatory challenges to make connectivity truly seamless.
If you’re driven by curiosity, creativity, and the chance to shape the future of telecom, we’d love to hear from you.
Things We Care About
We are building in a highly complex space and tackling a massive problem. We want people who lean in when things get hard.
- Speed. We move and we ship. We set bold deadlines and treat every week like it matters.
- Ownership. If you see something broken, fix it. We don't wait for permission.
- Customer Obsession. Our customers' product is our product.
- Ambiguity. We're building frontier technology in a complex domain. You'll need sound judgement and good instincts to make decisions without complete information.
- First principles. We don't ask how things have been done before. We ask why they were done that way at all.
The Role
Gigs is growing fast across markets, and we need someone to build the operational systems that make that growth possible. That includes compliance -- but this isn't a compliance role. It's a BizOps role where regulatory work is one of the hardest and most important problems you'll solve.
You'll build workflows, design processes, ship tooling, and work across Business Development, Legal, Product, and Engineering. You'll enable how we launch new markets, how we stay compliant across jurisdictions, and how we keep internal operations tight as we scale.
This is our first hire in this area. You'll shape the function from scratch.
What You Will Do
- Build our operational infrastructure for market expansion. Own the end-to-end process for launching in new markets: regulatory readiness, product compliance checks, internal workflows, and cross-functional coordination.
- Turn regulatory requirements into systems. Work with Legal to understand what's required, then build clear, repeatable processes that the team can follow without bottlenecks. Don't just document rules -- make them run.
- Automate before it breaks. Partner with Engineering and Product to embed controls into our systems early. Reduce manual work. Build things that scale before they need to.
- Own filings, registrations, and reporting. Manage our ongoing regulatory obligations across jurisdictions. Track deadlines. Make sure nothing slips.
- Run audits. Develop audit frameworks for internal operations and customer-facing processes. Keep them current.
- Track compliance health. Define metrics, build dashboards, flag problems early, fix them fast.
- Keep documentation sharp. Maintain policies, procedures, and process docs that are clear, findable, and up to date.
- Stay ahead of regulatory changes. Monitor new requirements across target markets. Build implementation plans before deadlines arrive.
What We Are Looking For
- 5+ years in business operations, ideally at a fintech, payments company, or other regulated tech business.
- You've built or scaled operational systems in a fast-moving environment. You know how to take a messy process, structure it, and make it run.
- Real experience with compliance or regulatory work -- not as a lawyer, but as someone who's turned regulatory requirements into working processes across areas like product compliance, vendor risk, or cross-border operations.
- Comfortable with tooling: GRC systems, databases, workflow automation. You don't need to be an engineer, but you can build things using AI.
- Strong communicator. You can explain a regulatory filing to an engineer and a process gap to a lawyer.
Bonus if you have experience in telecoms, fintech, or B2B SaaS.
Work At Gigs
At Gigs, we value in-person collaboration. We believe the best ideas, decisions, and relationships are built when teams spend meaningful time together, and our culture is designed around that belief. We support flexibility where it makes sense. Some focused work can be done remotely, and not every role or week looks the same. You should expect regular time in one of our hubs, as well as occasional travel for team workshops, customer meetings, and Gigs Republic, our bi-annual company off-site. Our offices are designed to feel like home-inspired workspaces, with plants, thoughtful tools, and small, tight-knit teams that make collaboration feel natural, energizing, and effective.
What We Offer
At Gigs, we believe in rewarding excellence. We offer competitive compensation and stock options because we see you as a true partner in our growth. We also provide stipends for your home office or work setup, a budget for learning and development to fuel your career, and of course, a free phone and international data plan
Want to learn more about our benefits, hubs, and what it’s like to work at Gigs? Check out our Careers page.
Ready to apply?
Apply to Gigs
Gigs
View all jobs →
Information Security Risk Analyst
Share this job
We are seeking a proactive, curious and hands-on Information Security Risk Analyst to join our global Business Information Security Officers (BISO) team. This role is ideal for someone early in their security career who enjoys a varied workload, thrives in a fast-paced environment, and wants to deepen their expertise in the business side of security.
What you'll do
As an Information Security Risk Analyst (Business), you will support Optiver’s global BISO team in ensuring that our information security controls, policies, and assurance activities are effective, pragmatic, and aligned with real-world business operations. You will play a key role in the day-to-day execution of our governance, risk and compliance workstreams, collaborating closely with colleagues in Europe, APAC & US.
Your responsibilities will include:
- Assist with policy maintenance, tracking implementation progress, and ensuring business adoption across global locations.
- Contribute to regulatory and audit responses by gathering evidence, interpreting requirements, and producing clear, accurate inputs.
- Support the management of the global security training and awareness program.
- Coordinate and support regular security control assessments, risk reviews, and assurance activities to verify that controls are operating as intended.
- Help maintain and strengthen Optiver’s control framework by identifying gaps, driving follow-up actions, and collaborating with technical and business teams.
- Support data analysis and automation efforts to streamline reporting, improve accuracy, and enable more efficient GRC processes.
This is a high-impact, hands-on role with significant variety. You will learn quickly, contribute meaningfully, and become a trusted partner for teams across the organisation.
Who you are
- At least 2 years of professional experience in information security, technology risk, GRC, or a related field, ideally in an in-house environment.
- Experience in project management.
- Solid understanding of fundamental information security concepts.
- Comfortable managing multiple priorities concurrently while maintaining high-quality output under time pressure.
- Strong communication skills (written and verbal), with the ability to convey clear, concise updates to both technical and business stakeholders.
- Able to work effectively across global teams and time zones, while also operating independently and knowing when to align.
- Comfortable using modern tools, including data analysis/reporting platforms, and leveraging AI to improve efficiency and quality.
- Pragmatic and structured in problem-solving, with a focus on practical, outcome-driven solutions.
- Proactive, accountable, and curious, with a strong sense of ownership and a desire to continuously learn and deepen expertise.
- Nice to Have:
- Exposure to NIST, ISO27001, or similar frameworks (practical understanding preferred over theoretical knowledge).
- Experience in contributing to activities such as control assessments, policy implementation projects, audits, and training programs.
Who we are
At Optiver, our mission is to constantly improve the market by injecting liquidity, providing accurate pricing, increasing transparency and acting as a stabilizing force no matter the market conditions. With a focus on continuous improvement, we participate in the safeguarding of healthy and efficient markets for everyone who participates. As one of the largest market making institutions, we are a trusted partner of 70+ exchanges across the globe.
What you'll get
You’ll join a culture of collaboration and excellence, where you’ll be surrounded by curious thinkers and creative problem solvers. Motivated by a passion for continuous improvement, you’ll thrive in a supportive, high-performing environment alongside talented colleagues, working collectively to tackle the toughest problems in the financial markets.
In addition, you’ll receive:
- A performance-based bonus structure unmatched anywhere in the industry. We combine our profits across desks, teams and offices into a global profit pool.
- The opportunity to work alongside best-in-class professionals from over 50 different countries.
- 25 paid vacation days in your first year, increasing to 30 from your second year onwards.
- Training opportunities, discounts on health insurance, and fully paid first-class commuting expenses.
- Extensive office perks, including breakfast, lunch and dinner, world-class barista coffee, in-house physio and chair massages, organized sports and leisure activities, and Friday afternoon drinks.
- Training and continuous learning opportunities, including access to conferences and tech events.
- Competitive relocation packages and visa sponsorship where necessary for expats.
How to apply
Apply directly via the form below. If you have any questions feel free to contact our Recruitment team via our recruitment inquiry form.
Please note:
- We do not require any assistance from third-parties including agencies in the recruitment of this role
- We cannot accept applications via email
Diversity statement
Optiver is committed to diversity and inclusion.
Ready to apply?
Apply to Optiver
Optiver
View all jobs →
Quantitative Researcher Internship | Amsterdam
Share this job
Quantitative Trading
Posted Apr 29, 2026
Graviton Research Capital (GRC) is a Singaporean trading firm, specialising in quantitative algorithmic strategies which are deployed on markets across the globe.
In 2026, GRC established a Research and Development arm within the Netherlands, which is seeking 2x Quantitative Research Interns to work closely with a Senior Quantitative Researcher in Amsterdam.
Successful candidates will work on projects that directly impact the team’s research on financial markets. Candidates will gain exposure to a range of concepts and techniques, including time series analysis, filtering, stochastic models, pattern recognition and statistical inference, gained through the analysis of terabytes of data. This is a unique opportunity to gain exposure to a small team within a growing Quantitative Research function!
About the role:
- 10 week summer internship (June - August 2026)
- Based in Amsterdam
Requirements:
- A quantitative focused degree, such as Mathematics, Statistics, Data Science, Econometrics, Machine Learning (or related fields)
- A working knowledge of Linux/Unix
- Programming experience, preferably in C++ or Python
- No prior knowledge of financial markets is needed but must have a strong interest in learning about financial markets
- Have a strong work ethic
- Entrepreneurial spirit
Successful candidates will be considered for future graduate and postgraduate positions.
Apply Now!
If you’re up for the challenge, submit your CV!
Ready to apply?
Apply to Graviton Research Capital LLP
Graviton Research Capital LLP
View all jobs →
Junior Security Operations Engineer
Share this job
Business Operations
Posted Apr 27, 2026
About Telnyx
Telnyx is an industry leader that's not just imagining the future of global connectivity—we're building it. From architecting and amplifying the reach of a private, global, multi-cloud IP network, to bringing hyperlocal edge technology right to your fingertips through intuitive APIs, we're shaping a new era of seamless interconnection between people, devices, and applications.
We're driven by a desire to transform and modernize what's antiquated, automate the manual, and solve real-world problems through innovative connectivity solutions. As a testament to our success, we're proud to stand as a financially stable and profitable company. Our robust profitability allows us not only to invest in pioneering technologies but also to foster an environment of continuous learning and growth for our team.
Our collective vision is a world where borderless connectivity fuels limitless innovation. By joining us, you can be part of laying the foundations for this interconnected future. We're currently seeking passionate individuals who are excited about the opportunity to contribute to an industry-shaping company while growing their own skills and careers.
About the Role
We’re looking for a Junior Security Operations Engineer who is AI-Forward to help scale and modernize our SecOps program. This is a hands-on, builder role for someone who will design and ship the security tooling that powers our triage, investigations, and response workflows.
You’ll report to the Technical Operations Director and work alongside our GRC lead to improve our vulnerability intake, threat response, darkweb posture, and internal security tooling. A core part of this role is building AI-assisted security tooling: triage agents that pre-classify bug bounty reports, investigation copilots that pull context from logs and SIEM data, response workflows that draft remediation steps and track them to closure. You’ll spend as much time wiring up that tooling as you will reproducing vulnerabilities and working incidents.
This role suits someone who thrives in a lean, high-impact environment, has strong opinions on where humans add value versus where tooling should take over, and wants to shape how a modern security team operates.
What You’ll Do
Triage & Vulnerability Management
- Review incoming vulnerability reports from our bug bounty intake; reproduce and document valid issues for engineering teams.
- Build the tooling that improves signal-to-noise: automate duplicate detection, spam filtering, and abuse flagging so humans only touch what’s worth touching.
- Act on DAST findings: coordinate remediation, verify fixes, and re-test.
- Track remediation timelines for critical vulnerabilities and keep stakeholders honest on SLAs.
Threat Response & Monitoring
- Monitor and respond to EDR and cloud security alerts; investigate, contain, and document.
- Analyze darkweb findings and credential exposures; shape our darkweb monitoring practices and tooling over time.
- Improve detection coverage: tune noisy rules, close gaps, and enrich alerts with context so responders spend time on decisions, not data gathering.
- Help configure and tune DLP, SIEM, and AI security tooling.
Security Tooling (core to this role)
- Build AI-assisted triage tooling that pre-classifies bug bounty reports, flags duplicates, and routes real issues to the right engineering team with reproduction context attached.
- Build investigation tooling: LLM-backed copilots and Slack bots that pull alert context, correlate signals across sources, and surface what actually matters.
- Build response tooling: workflows that draft remediation steps, generate evidence artifacts, and track issues to closure across the teams that own them.
- Evaluate emerging AI security tooling and bring what’s genuinely useful into the stack; retire what isn’t.
- Apply a security-minded lens to our own AI usage: prompt injection, data exfiltration, model misuse, and the guardrails that go around them.
Compliance & Cross-Functional
- Support audit evidence collection for SOC 2, ISO 27001, and PCI DSS.
- Partner with ITOps to verify patches, endpoint coverage, and access hygiene.
You May Be a Good Fit If You Have
- Previous experience in a SecOps, Security Analyst, or Threat Response role.
- Proven ability to understand and reproduce technical vulnerabilities. You can read a bug report and tell whether it’s real.
- Experience with bug bounty triage (HackerOne, Bugcrowd, or similar).
- Hands-on exposure to SIEM, EDR, and DLP tools in production environments.
- A genuine, demonstrated interest in applying AI/LLMs to security work: side projects, internal tooling, prompt engineering, agent frameworks, anything that shows you’ve actually built with this stuff.
- Scripting and automation skills in Python, Bash, or similar. You reach for code before you reach for a checklist.
- Comfort working autonomously across time zones and asynchronously.
- Strong written communication. You can turn a messy investigation into a clear, defensible writeup.
Bonus Points For
- Experience building LLM agents, RAG pipelines, or Slack bots backed by OpenAI / Anthropic / open-source models.
- Detection engineering experience (Sigma rules, custom Falcon queries, Grafana/Loki dashboards).
- Cloud security depth in AWS or GCP (IAM, workload posture, cloud-native logging).
- Prior work in regulated environments (SOC 2, ISO 27001, PCI DSS) from the practitioner side.
- Exposure to AI/ML security concerns such as prompt injection, model evals, and data leakage through LLMs.
- Public contributions: blog posts, CVEs, open-source tools, CTF writeups.
Engagement & Logistics
- Full-time contract.
- Remote-first and async-friendly. We have hubs in San Francisco, Denver, Dublin, and Amsterdam. If you’re near one, we’d love to see you in the office regularly; if you’re elsewhere in the world, that works too.
- Potential to extend or convert based on fit.
- Reports to the Technical Operations Director; works closely with the GRC lead and IT Operations.
How We Work
We’re a lean, high-trust team. We value people who ship, who can operate independently, and who treat security as an engineering problem rather than a checklist. If you’re someone who sees a repetitive task and immediately thinks “this should be a script, or better yet, an agent,” you’ll fit in here.
To Apply
Tell us about a time you used AI, automation, or custom tooling to meaningfully change how a security workflow ran. What was manual before, what it looked like after, and what you learned. Links to code, writeups, or demos are welcome.
Ready to apply?
Apply to Telnyx
Telnyx
View all jobs →
At Workwize, we’re helping IT teams to easily equip their remote and global teams with all necessary IT equipment. Our automated SaaS platform simplifies hardware deployment, management, and retrieval with fast, reliable deliveries in 100+ countries.
With 50.000 users and 120.000 devices under management, we’re solving hybrid work challenges like laptop deliveries, returns and equipment tracking, allowing IT teams to focus less on manual hassles and more on strategic initiatives.
Join our team to help shape the future of global collaboration. At Workwize, your work will make a real impact in building smarter, more connected workplaces worldwide.
LinkedIn has also recognized Workwize as one of the Top 10 Startups for 2025 in the Netherlands!
-png.png?width=329&height=124&name=image%20(4)-png.png)
About the Role
At Workwize, security is not a checkbox. It’s operational discipline. As we scale with larger customers and more complex infrastructure, we need someone who doesn’t just maintain compliance but actively reduces real risk. At Workwize we: Own it. Improve it. Raise the bar.
As our Security Specialist, you own and execute our security program end-to-end. You don’t write policies for the sake of it. You make sure controls actually work. You constantly ask: are we doing this at the highest level? What can be tighter? What can be automated? What can be improved?
This is a hands-on role for someone with experience who thrives in a fast-moving SaaS environment and knows how to combine ISO/SOC discipline with practical execution.
Responsibilities
- Continuously improve our security posture across product and internal systems.
- Keep policies, controls, and risk registers alive and relevant.
- Identify gaps and close them.
- Run periodic security checks: access reviews, vendor reviews, incident simulations.
- Make sure security controls are not just documented but actually working.
Own and elevate ISO27001 & SOC2:
- Own audit readiness and evidence collection.
- Improve control effectiveness year over year.
- Coordinate engineering, IT, ops, and legal during audits.
- Respond to enterprise security reviews and questionnaires.
- Own third-party risk management and vendor security reviews.
You work closely with Engineering and Platform to:
- Strengthen application & cloud security.
- Embed secure SDLC practices.
- Run security reviews for key changes.
- Drive threat modeling for new features.
- Own vulnerability management (triage, SLAs, verification).
- Improve AppSec tooling (SAST, DAST, dependency scanning, secret scanning).
- Strengthen IAM, logging, monitoring, key management, and cloud baselines.
Be our security anchor:
- Act as the go-to person for security questions.
- Train teams in practical, lightweight best practices.
- Communicate clearly and directly with engineers and leadership.
- Stay calm and structured during incidents or urgent customer escalations.
Required Skills & Qualifications
- 5+ years in security roles (Security Engineer, Security Specialist, GRC + technical, AppSec, etc.
- Proven experience owning a security program and strong background in ISO27001 and SOC2 (Type II)
- Experienced supporting enterprise customers during procurement and security reviews, ideally also in a startup, scale-up, or fast-moving SaaS environment
- You can assess technical risk and turn it into prioritized, practical improvements. You focus on impact and execution, not theory.
- You are reliable, autonomous and able to collaborate smoothly with engineering and leadership.
- You communicate directly and to the point. You’re comfortable going deep technically when needed, but you always translate risk into clear actions.
- Strong fundamental technical skills in:
- IAM and least privilege
- Network and cloud security
- Encryption and secrets management
- Logging, monitoring, alerting
- Vulnerability management workflows
- OWASP Top 10 and secure development practices
- Hands-on experience with:
- Cloud security (AWS/GCP/Azure)
- SAST/DAST and dependency scanning
- Vendor risk management
- Audit cycles and evidence management
- SIEM or lightweight logging solutions
Workwize Offers
- Flexible hybrid work environment.
- Top-notch tools and equipment provided.
- Vibrant, entrepreneurial culture with opportunities for growth.
- Off-sites and multi-yearly team bonding events.
- Team lunches and surprise events to keep things fun.
- Pension scheme.
- The chance to shape how AI is used across an entire product, not just bolt it onto a feature.
- Classpass corporate membership.
Our Team
Becoming part of Workwize means making an impact. We make sure that we will contribute to the change in the way of working. For us it is also important that we make an impact on our employees, that they feel challenged and ease. We consist of a rapid growing and ambitious team with all different backgrounds. Entrepreneurs, Operational specialists, Developers, Sales gurus you can find them all at Workwize and are always on the look-out for the next original ideas to reach more consumers and create the best value for our customers.
We are looking forward to meeting you and discover if there is a match with the Workwize team!
Ready to apply?
Apply to Workwize
Workwize
View all jobs →