Finom is a European tech startup headquartered in Amsterdam, and we're on a journey towards revolutionizing the financial landscape for entrepreneurs worldwide. Our mission is to develop an all-in-one financial B2B solution that integrates banking functions, accounting, financial management, and invoicing into a seamless, mobile-first platform. This significant investment follows a $105 million growth funding round from General Catalyst, a long-term backer since ***
* known for supporting companies like Airbnb, HubSpot, KAYAK, and Stripe. Finom's platform goes beyond traditional banking, offering invoicing and a growing suite of features, including AI-enabled accounting, aiming to simplify financial management for entrepreneurs. We nurture innovation and an inspiring work environment where bold ideas thrive, prioritizing thorough research, swift implementation of solutions, and ensuring that every effort we make benefits our users, employees, partners, and our business as a whole. Finom is a licensed EMI operating across several EU markets, where information security and compliance are a big part of how we work. We're looking for an Information Security Officer to join our Cyber Security team and take ownership of security compliance and risk management day to day. You'll report directly to the CISO and work closely with our Cyber Security and Engineering teams, as well as Risk, Legal & Compliance, Internal Audit and other teams across the company. Maintain the ISMS and ICT risk management framework records: document and records register, control ownership and evidence repository. Perform and refresh information security risk assessments, maintain the risk register, prepare risk treatment plans and track their implementation with control owners.



Run periodic checks of control design and operating effectiveness and raise gaps for remediation. Draft and maintain information security policies, procedures and guidelines and prepare them for annual review and approval. Perform security assessments of new suppliers and periodic reassessments of existing ones together with Risk, Legal and the DPO. Review new projects, products and vendors from an information security and compliance perspective. Keep company-wide security awareness and training materials relevant and up to date. Automate evidence collection, control checks, questionnaire answering and reporting with templates, scripts and AI tooling. 4+ years of experience in information security compliance, ISMS, GRC or related areas. Experience with information security risk assessments, risk registers and risk treatment plans. Able to translate standards and regulatory requirements into practical controls, procedures and evidence that people actually follow. Strong written English and clear documentation skills. Experience in banking, payments or an EMI. PCI DSS, SWIFT CSP or payment scheme assessments. Knowledge of DORA, NIS2 and GDPR, including working with a DPO on RoPA and DPIA. We provide the resources and opportunities for continuous personal and professional development, empowering you to make a genuine impact on our evolving product. Embark on this exciting journey with us and enjoy the flexibility of traveling and working remotely or in a hybrid model across Europe. This exciting opportunity is available to every team member, from junior team members to our founders. At Finom, we're an equal opportunity employer and value diversity at our company. If you would like more information about how your data is processed, please contact us. #

📌 Information Security Officer (España)
🏢 Finom
📍 España