CTO & CISO

Define and lead the Company’s overall technology strategy, systems architecture, and product development roadmap.

Develop, implement and maintain the Company’s information security framework, policies and procedures in line with ISO 27001 and applicable regulatory standards.

Ensure the Company’s ICT systems and digital operational resilience comply with Regulation (EU) 2022/2554 (DORA), including ICT risk management, incident classification and reporting, resilience testing, and ICT third-party risk oversight.

Oversee access controls, encryption, incident response procedures, and data protection measures across all information systems.

Ensure compliance with data protection requirements under the GDPR and the Spanish Ley Orgánica 3/2018 (LOPDGDD).

Manage the Company’s cloud infrastructure, payment processing systems, and API integrations, ensuring high availability, scalability and resilience.

Coordinate with third-party technology and outsourcing providers, ensuring outsourced services meet security, confidentiality and Banco de España outsourcing requirements.

Conduct regular risk assessments, vulnerability analyses and penetration testing of systems and networks, and lead remediation efforts.

Provide IT security training and awareness to employees.

Report on technology strategy, ICT risk and security incidents to senior management, the Board and, where applicable, the Banco de España.

Bachelor’s or Master’s degree in Computer Science, Engineering, Information Security or a related discipline.

Minimum 5 years of experience in technology leadership roles, with at least 3 years in information security, preferably within financial services or fintech in Europe.

Professional certification such as CISSP, CISM, or ISO 27001 Lead Implementer preferred.

Strong knowledge of DORA, network security, cloud architecture, encryption and access management.

Proven experience building and scaling technology teams and payment platforms.

Fluency in Spanish and English, Mandarin Chinese is a plus.