Information Security Officer
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Information Security Officer managing ISMS, audits, vendor assessments and ICT risk for Finom’s European financial platform. Reporting to the CISO and improving compliance through automation.
Responsibilities:
- Maintain the ISMS and ICT risk management framework records, including the document and records register, control ownership and evidence repository
- Perform and refresh information security risk assessments
- Maintain the risk register and prepare risk treatment plans
- Track implementation of risk treatment plans with control owners
- Prepare for and manage internal and external audits, certifications and assessments
- Own the audit calendar, collect evidence, work directly with auditors and track findings to closure
- Check control design and operating effectiveness and raise remediation gaps
- Draft and maintain information security policies, procedures and guidelines
- Prepare policies and guidelines for annual review and approval
- Collect and analyse ISMS KPIs and KRIs
- Prepare regular security and risk reporting for management
- Perform security assessments of new suppliers and periodic reassessments with Risk, Legal and the DPO
- Prepare responses to security and compliance questionnaires from partners, customers and regulators
- Review new projects, products and vendors for information security and compliance
- Track changes in cybersecurity, ICT risk and privacy regulations and supervisory guidance
- Maintain company-wide security awareness and training materials
- Automate evidence collection, control checks, questionnaire answering and reporting using templates, scripts and AI tooling
- Report directly to the CISO and collaborate with Cyber Security, Engineering, Risk, Legal & Compliance and Internal Audit teams
Requirements:
- 4+ years of experience in information security compliance, ISMS, GRC or related areas
- Practical experience with ISO/IEC 27001, including working with an ISMS and preparing for and completing certification or surveillance audits
- Experience with information security risk assessments, risk registers and risk treatment plans
- Experience answering security questionnaires and due diligence requests from partners, customers or regulators
- Ability to translate standards and regulatory requirements into practical controls, procedures and evidence
- Hands-on, self-driven approach with end-to-end task ownership
- Openness to and active use of AI tools and automation
- Strong written English and clear documentation skills
- Experience in banking, payments or an EMI
- PCI DSS, SWIFT CSP or payment scheme assessments
- Knowledge of DORA, NIS2 and GDPR, including working with a DPO on RoPA and DPIA
- Vendor security assessment and third-party risk experience
- Certifications such as ISO/IEC 27001 Lead Implementer or Lead Auditor, CISA, CRISC or CISM
Benefits:
- Continuous personal and professional development opportunities
- Flexible travel and remote or hybrid work across Europe
- Stock Options Program available to every team member
- Ongoing support and care
- Work & Swim Program: one month in a corporate apartment in Cyprus
- Eco-conscious corporate culture
Similar Jobs
Security Engineer
Security Engineer investigating high-impact incidents and building SIEM-based detections for Expleo, a global engineering and technology services provider. Remote role for candidates living in Portugal.
Information Security Officer
Information Security Officer maintaining Finom’s certified ISMS, risk framework, audits, and supplier assessments. Supporting compliance for the company’s European B2B financial platform.
Information Security Officer
Information Security Officer maintaining ISMS, audits, and ICT risk management for Finom’s European financial platform. Improving compliance through supplier assessments, reporting, automation, and regulatory monitoring.
Application Security Architect
Application Security Architect securing NinjaOne’s unified IT operations platform. Leading threat modeling, secure architecture reviews, and security initiatives across software, cloud, infrastructure, and identity.
Security Consultant II
Security Consultant II leading Prolexic DDoS integration, testing, and project delivery. Advising Akamai customers on web security, mitigation, and long-term security strategy.
Senior Security Engineer, Enterprise Security
Senior Security Engineer engineering controls and automation for Databricks, the Data and AI company. Securing enterprise applications, identity, cloud, SaaS, and data systems.
Senior Security Researcher – Red Team
Senior Security Researcher conducting red-team operations against GenAI, deepfake, cloud, and voice-security systems. Strengthening Pindrop’s cybersecurity platform through offensive research and attack automation.
Security Advisor II, Falcon Complete
Security Advisor assessing Falcon environments and improving customer security posture. Guiding CrowdStrike Falcon Complete customers through remediation, reporting, and technical issue resolution.
Security Advisor II, Falcon Complete
Security Advisor guiding CrowdStrike Falcon Complete customers toward stronger security posture. Assessing Falcon environments, recommending remediation, and resolving customer issues.
Regional Sales Director – Identity Security
Regional Sales Director leading Cyera’s Pacific Northwest sales team. Building territory growth and exceeding quotas for Cyera’s AI and data security platform.
Information Security, Compliance & Internal Controls Manager – ISO 27001
Information Security Manager preparing Cloudiax’s cloud SAP services for ISO 27001, NIS-2, and IKS compliance. Managing audits, security documentation, and internal control processes remotely worldwide.
Senior Manager, Application and Pipeline Security
Senior Manager leading Nielsen’s AI-driven application and cloud security for media measurement platforms. Building automated DevSecOps guardrails, vulnerability remediation, and secure AWS development workflows.
Staff Software Engineer, Security Factory – Static Analysis
Staff software engineer directing GitLab's AI-assisted static analysis engine and SAST capabilities. Defining program-analysis architecture, trustworthy agent tooling, and security detection quality.
Cybersecurity Director
Cybersecurity Director leading Cummins’ global application, cloud, vulnerability, and penetration-testing security strategy. Translating technical findings into enterprise risk decisions and enabling secure Frontier AI adoption.
Azure Cloud & Security Engineer
Azure Cloud & Security Engineer building secure, scalable Azure infrastructure for CI&T’s enterprise AI transformation solutions. Managing Bicep IaC, Azure DevOps pipelines, Container Apps, KEDA autoscaling, and cloud security.
Senior IT Systems Specialist – IAM & Security – F5 BIG-IP, Keycloak, Nevis
Senior IAM & Security specialist operating F5 BIG-IP, Keycloak and Nevis solutions for a Swiss recruiting agency client. Securing authentication and access to business-critical applications, APIs and portals.
Information Security Compliance Intern
Information Security Compliance Intern supporting audit partner operations at Sprinto, an autonomous trust platform. Building AI-assisted workflows for compliance and evidence mapping.
Cybersecurity Intern – Application Security
Cybersecurity intern supporting application security projects at GuidePoint Security, a cybersecurity solutions provider. Building skills through technical development, security response, training, and expert mentorship.
Senior Security and Compliance Specialist
Senior Security and Compliance Specialist securing Veterans Affairs technology programs. Applying NIST, FISMA, and compliance expertise to support federal digital services and ATO activities.
Information Security Architect – AI
AI Security Architect designing secure frameworks for Cotiviti’s AI systems. Leading threat modeling, testing, compliance, and data protection across the AI lifecycle.