Ciso

Evotym
Las Palmas, Spain
5 days ago
Apply on www.buscojobs.com.es
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience required
3 years minimum
Working hours
Regular working hours
Languages
English, Russian

Tech stack

Software System Penetration Testing Cyber Security Open Web Application Security PCI Data Security Standards Security Information and Event Management Software Engineering Systems Integration Software Vulnerability Management

Job description

About The ClientOur client is an international technology business operating in the digital financial services sector. The company supports complex business operations through technology-driven solutions, with a strong focus on operational resilience, risk management and the protection of critical systems and data.About The ClientOur client is an international technology business operating in the digital financial services sector. The company supports complex business operations through technology-driven solutions, with a strong focus on operational resilience, risk management and the protection of critical systems and data.About The RoleThe CISO will lead the company’s information security strategy, oversee cybersecurity and ICT risk management, and ensure that security is embedded across business operations and product development. The role combines strategic leadership, technical expertise and regulatory oversight, with responsibility for developing a strong security function and strengthening the organisation’s resilience.ResponsibilitiesMaintain and develop the information security strategy, policies and standards aligned with business objectives and regulatory requirements.Identify, assess and mitigate cybersecurity and ICT risks, maintaining the risk register and overseeing the company’s information security controls and asset inventory.Lead security audits, vulnerability management, penetration testing and security monitoring, ensuring timely remediation of identified issues.Ensure compliance with applicable security standards and regulations, including PCI DSS and ISO/IEC **, and support relevant audits and regulatory interactions.Integrate security requirements into product development, infrastructure changes and business processes, applying security-by-design principles.Develop and maintain business continuity and disaster recovery plans in collaboration with relevant teams.Build, lead and develop the information security team, establishing clear responsibilities, priorities and performance metrics.Promote security awareness and a strong security culture across the organisation.Requirements5+ years of experience in information security or cybersecurity, including at least 3 years in a leadership role.Strong experience in fintech, PSP, payment processing or another security-sensitive financial technology environment.Proven track record of developing and implementing information security strategies and managing enterprise-wide security risks.Practical knowledge of PCI DSS, ISO/IEC **, ISO/IEC **, ISO **, NIST frameworks and other relevant security standards.Experience with ICT risk management, risk registers, asset inventories, SIEM, vulnerability management, penetration testing and OWASP security practices.Experience participating in product development and integrating security into the software development lifecycle.Experience communicating with regulators, auditors and senior business stakeholders.Excellent communication, analytical and reporting skills.Fluent English and Russian are required.Key Soft SkillsOwnership and accountability, taking responsibility for security and following tasks through to completion.Strategic thinking, setting priorities and balancing security needs with business goals.Leadership through influence, building trust and encouraging teams to follow security best practices.Cross?culture communication, working effectively with colleagues from different backgrounds.What We OfferCompetitive salary aligned with experience.Collaborative and transparent team culture.High?impact role in a scaling fintech company.Recognition of personal milestones and achievements.Social benefits.#J-*****-Ljbffr

Requirements

5+ years of experience in information security or cybersecurity, including at least 3 years in a leadership role. Strong experience in fintech, PSP, payment processing or another security-sensitive financial technology environment. Proven track record of developing and implementing information security strategies and managing enterprise-wide security risks. Practical knowledge of PCI DSS, ISO/IEC **, ISO/IEC **, ISO *****, NIST frameworks and other relevant security standards. Experience with ICT risk management, risk registers, asset inventories, SIEM, vulnerability management, penetration testing and OWASP security practices. Experience participating in product development and integrating security into the software development lifecycle. Experience communicating with regulators, auditors and senior business stakeholders. Excellent communication, analytical and reporting skills. Fluent English and Russian are required. Key Soft Skills Ownership and accountability, taking responsibility for security and following tasks through to completion. Strategic thinking, setting priorities and balancing security needs with business goals. Leadership through influence, building trust and encouraging teams to follow security best practices. Cross?culture communication, working effectively with colleagues from different backgrounds.

Benefits & conditions

Competitive salary aligned with experience. Collaborative and transparent team culture. High?impact role in a scaling fintech company. Recognition of personal milestones and achievements. Social benefits. #J-*****-Ljbffr

About the company

Las Palmas de Gran Canaria, Las Palmas, España

About The Client Our client is an international technology business operating in the digital financial services sector. The company supports complex business operations through technology-driven solutions, with a strong focus on operational resilience, risk management and the protection of critical systems and data. About The Client Our client is an international technology business operating in the digital financial services sector. The company supports complex business operations through technology-driven solutions, with a strong focus on operational resilience, risk management and the protection of critical systems and data.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.buscojobs.com.es
Prepare application

Good distractions

Loading talks and stories from around this role…