16 sep
|
Antal International
|
Madrid
16 sep
Antal International
Madrid
About the Company
Our client is a regulated fintech company operating in Spain, currently strengthening its Information Security and Technology Risk function under the DORA framework.
About the Role
The CISO acts as the center of competence for Information Security and Technology Risk.
The role is to make sure the organization’s technology, systems, data, software, suppliers, and operations are secure, resilient, and compliant with DORA, covering everything from risk and governance to cybersecurity operations, incident response, third parties, and secure software development.
Responsibilities
- Security strategy & governance:
Define and maintain the information security strategy, policies, standards, and governance framework in line with DORA, EBA, and other regulations.
- Risk management:
Identify and assess cybersecurity and technology risks, including risks from IT systems, critical suppliers, outsourced services, and new products, and ensure appropriate controls are in place.
- Security controls:
Oversee security controls across IT, applications, infrastructure, data,
architecture, cloud, networks, endpoints, and payment/transaction systems.
- Cybersecurity operations:
Ensure effective vulnerability management, threat management, monitoring, and protection of networks, applications, endpoints, and cloud environments.
- Incident response & resilience:
Lead security incident detection, response, recovery, and business continuity activities, including testing and exercises.
- Secure software development:
Ensure security is embedded throughout the software development lifecycle, covering DevSecOps, IAM, API security, secrets, logging, code analysis, cloud security, and vulnerability management.
- Third-party risk:
Define security requirements for technology providers and outsourced services and conduct annual audits of DORA-critical providers.
- Critical systems & data:
Identify and classify critical systems, applications, and data, and assess their operational
📌 Chief Information Security Officer (Madrid)
🏢 Antal International
📍 Madrid