Information Security Officer
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Information Security Officer maintaining Finom’s certified ISMS, risk framework, audits, and supplier assessments. Supporting compliance for the company’s European B2B financial platform.
Responsibilities:
- Maintain the ISMS and ICT risk management framework records, including the document and records register, control ownership, and evidence repository
- Perform and refresh information security risk assessments
- Maintain the risk register and prepare risk treatment plans
- Track implementation of risk treatments with control owners
- Prepare for and manage internal and external audits, certifications, and assessments
- Own the audit calendar, collect evidence, work with auditors, and track findings to closure
- Check control design and operating effectiveness and raise remediation gaps
- Draft, maintain, and prepare information security policies, procedures, and guidelines for review and approval
- Collect and analyse ISMS KPIs and KRIs and prepare security and risk reporting for management
- Perform security assessments of new suppliers and reassess existing suppliers with Risk, Legal, and the DPO
- Prepare responses to security and compliance questionnaires from partners, customers, and regulators
- Review new projects, products, and vendors from an information security and compliance perspective
- Track cybersecurity, ICT risk, privacy regulation, and supervisory guidance changes and propose required updates
- Maintain company-wide security awareness and training materials
- Automate evidence collection, control checks, questionnaire responses, and reporting using templates, scripts, and AI tooling
- Report directly to the CISO and collaborate with Cyber Security, Engineering, Risk, Legal & Compliance, Internal Audit, and other teams
Requirements:
- 4+ years of experience in information security compliance, ISMS, GRC or related areas
- Practical experience with ISO/IEC 27001, including working with an ISMS and preparing for certification or surveillance audits
- Experience with information security risk assessments, risk registers, and risk treatment plans
- Experience answering security questionnaires and due diligence requests from partners, customers, or regulators
- Ability to translate standards and regulatory requirements into practical controls, procedures, and evidence
- Hands-on and self-driven approach, owning tasks end to end
- Openness to and active use of AI tools and automation
- Strong written English and clear documentation skills
- Experience in banking, payments, or an EMI is nice to have
- PCI DSS, SWIFT CSP, or payment scheme assessments are nice to have
- Knowledge of DORA, NIS2, and GDPR, including working with a DPO on RoPA and DPIA, is nice to have
- Vendor security assessment and third-party risk experience is nice to have
- Certifications such as ISO/IEC 27001 Lead Implementer or Lead Auditor, CISA, CRISC, or CISM are nice to have
Benefits:
- Continuous personal and professional development opportunities
- Remote or hybrid work flexibility across Europe
- Stock Options Program for every team member
- Supportive, modern, friendly, and eco-conscious corporate culture
- Work & Swim Program: one month in a corporate apartment in Cyprus
Similar Jobs
Security Engineer
Security Engineer investigating high-impact incidents and building SIEM-based detections for Expleo, a global engineering and technology services provider. Remote role for candidates living in Portugal.
Information Security Officer
Information Security Officer maintaining ISMS, audits, and ICT risk management for Finom’s European financial platform. Improving compliance through supplier assessments, reporting, automation, and regulatory monitoring.
Information Security Officer
Information Security Officer managing ISMS, audits, vendor assessments and ICT risk for Finom’s European financial platform. Reporting to the CISO and improving compliance through automation.
Application Security Architect
Application Security Architect securing NinjaOne’s unified IT operations platform. Leading threat modeling, secure architecture reviews, and security initiatives across software, cloud, infrastructure, and identity.
Security Consultant II
Security Consultant II leading Prolexic DDoS integration, testing, and project delivery. Advising Akamai customers on web security, mitigation, and long-term security strategy.
Senior Security Engineer, Enterprise Security
Senior Security Engineer engineering controls and automation for Databricks, the Data and AI company. Securing enterprise applications, identity, cloud, SaaS, and data systems.
Senior Security Researcher – Red Team
Senior Security Researcher conducting red-team operations against GenAI, deepfake, cloud, and voice-security systems. Strengthening Pindrop’s cybersecurity platform through offensive research and attack automation.
Security Advisor II, Falcon Complete
Security Advisor assessing Falcon environments and improving customer security posture. Guiding CrowdStrike Falcon Complete customers through remediation, reporting, and technical issue resolution.
Security Advisor II, Falcon Complete
Security Advisor guiding CrowdStrike Falcon Complete customers toward stronger security posture. Assessing Falcon environments, recommending remediation, and resolving customer issues.
Regional Sales Director – Identity Security
Regional Sales Director leading Cyera’s Pacific Northwest sales team. Building territory growth and exceeding quotas for Cyera’s AI and data security platform.
Information Security, Compliance & Internal Controls Manager – ISO 27001
Information Security Manager preparing Cloudiax’s cloud SAP services for ISO 27001, NIS-2, and IKS compliance. Managing audits, security documentation, and internal control processes remotely worldwide.
Senior Manager, Application and Pipeline Security
Senior Manager leading Nielsen’s AI-driven application and cloud security for media measurement platforms. Building automated DevSecOps guardrails, vulnerability remediation, and secure AWS development workflows.
Staff Software Engineer, Security Factory – Static Analysis
Staff software engineer directing GitLab's AI-assisted static analysis engine and SAST capabilities. Defining program-analysis architecture, trustworthy agent tooling, and security detection quality.
Cybersecurity Director
Cybersecurity Director leading Cummins’ global application, cloud, vulnerability, and penetration-testing security strategy. Translating technical findings into enterprise risk decisions and enabling secure Frontier AI adoption.
Azure Cloud & Security Engineer
Azure Cloud & Security Engineer building secure, scalable Azure infrastructure for CI&T’s enterprise AI transformation solutions. Managing Bicep IaC, Azure DevOps pipelines, Container Apps, KEDA autoscaling, and cloud security.
Senior IT Systems Specialist – IAM & Security – F5 BIG-IP, Keycloak, Nevis
Senior IAM & Security specialist operating F5 BIG-IP, Keycloak and Nevis solutions for a Swiss recruiting agency client. Securing authentication and access to business-critical applications, APIs and portals.
Information Security Compliance Intern
Information Security Compliance Intern supporting audit partner operations at Sprinto, an autonomous trust platform. Building AI-assisted workflows for compliance and evidence mapping.
Cybersecurity Intern – Application Security
Cybersecurity intern supporting application security projects at GuidePoint Security, a cybersecurity solutions provider. Building skills through technical development, security response, training, and expert mentorship.
Senior Security and Compliance Specialist
Senior Security and Compliance Specialist securing Veterans Affairs technology programs. Applying NIST, FISMA, and compliance expertise to support federal digital services and ATO activities.
Information Security Architect – AI
AI Security Architect designing secure frameworks for Cotiviti’s AI systems. Leading threat modeling, testing, compliance, and data protection across the AI lifecycle.