> Markdown version of [/jobs/ext/1673439-senior-information-security-officer-arbo](https://www.wearedevelopers.com/jobs/ext/1673439-senior-information-security-officer-arbo). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Information Security Officer (Arbo)

- **Company:** Criptan
- **Location:** Arbo, Spain (Remote available)
- **Contract:** Permanent contract
- **Skills:** Flutter, Amazon Web Services, Software System Penetration Testing, Cloud Engineering, Cyber Security, Amazon DynamoDB, Identity and Access Management, MySQL, Node.Js, Redis, Backend, Containerization, Front End Software Development, Service Stack
- **Published:** July 17, 2026
- **Apply:** https://www.buscojobs.com.es/senior-information-security-officer-arbo-en-arbo-ID-364227976

## About the Role

Qualifications ~5+ years of progressive experience in information security, risk, or compliance.
Proven success in regulated financial services, fintech, or crypto environments, including engagement with regulators.
Deep knowledge of European regulatory frameworks (MiCA, DORA, GDPR) and international standards (ISO?*****, SOC?2, NIST).
Recognized professional certifications highly desirable: CISSP, CISM, CISA, ISO?***** Lead Implementer / Auditor.
Familiarity with modern cloud?native technology stacks (AWS, Node.Js, Flutter, MySQL) is a plus.

## Description

Chief Information Security Officer (CISO) Location: Remote.Schedule: Full-time.We are seeking a highly experienced security and risk executive to join Criptan as the ultimate owner of information security, compliance, and enterprise risk management.Reporting directly to the Board, this role is critical to safeguarding our organization, ensuring regulatory alignment, and embedding a culture of security across all business units.Responsibilities Act as the executive owner of information security and risk management, reporting directly to the Board.Develop and maintain a comprehensive security and compliance strategy aligned with Criptan's business goals and European regulatory requirements (MiCA, DORA, GDPR, ISO?*****, SOC?2).Oversee the design and governance of security policies, frameworks, and internal controls across all business units.Lead the enterprise risk management function, including cyber risk, operational risk, third?party/vendor risk, and business continuity.Serve as the primary point of contact with regulators, auditors, and external stakeholders on information security and compliance matters.Provide regular risk and security updates to the Board, including dashboards, KPIs, and strategic recommendations.Supervise security audits, penetration tests, and certifications, ensuring continuous improvement of Criptan's security posture.Champion a security culture across the organization, providing leadership, training, and communication at all levels.Ensure that engineering and operations teams integrate security by design into the technical stack: Backend: Node.Js, Frontend / Mobile / Web: Flutter, Databases: MySQL, DynamoDB, Redis, Infrastructure: AWS (multi?AZ, containerized workloads, IAM, WAF, monitoring, etc.).Qualifications ~5+ years of progressive experience in information security, risk, or compliance.Proven success in regulated financial services, fintech, or crypto environments, including engagement with regulators.Deep knowledge of European regulatory frameworks (MiCA, DORA, GDPR) and international standards (ISO?*****, SOC?2, NIST).Recognized professional certifications highly desirable: CISSP, CISM, CISA, ISO?***** Lead Implementer / Auditor.Familiarity with modern cloud?native technology stacks (AWS, Node.Js, Flutter, MySQL) is a plus.Focus is on governance, not hands?on coding.#J-*****-Ljbffr


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [MySQL Protocol Features You Should Be Aware Of](https://www.wearedevelopers.com/videos/100267-mysql-protocol-features-you-should-be-aware-of)
- [Reducing LLM Calls with Vector Search Patterns - Raphael De Lio (Redis)](https://www.wearedevelopers.com/videos/1714-reducing-llm-calls-with-vector-search-patterns-raphael-de-lio-redis)
- [Flutter Packages and Plugins - A Look Under the Hood](https://www.wearedevelopers.com/videos/555-flutter-packages-and-plugins-a-look-under-the-hood)
- [Writing truly cross plattform applications using flutter](https://www.wearedevelopers.com/videos/456-writing-truly-cross-plattform-applications-using-flutter)
- [Accelerating Authentication Architecture: Taking Passwordless to the Next Level](https://www.wearedevelopers.com/videos/733-accelerating-authentication-architecture-taking-passwordless-to-the-next-level)

## Related Articles

- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)
- [Find a Developer Job: 12 Best Job Sites For Developers](https://www.wearedevelopers.com/magazine/165-find-a-developer-job-12-best-job-sites-for-developers)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Basic And Advanced Networking in Dart and Flutter](https://www.wearedevelopers.com/magazine/112-basic-and-advanced-networking-in-dart-and-flutter)