About the Client
Our client is an international technology business operating in the digital financial services sector. The company supports complex business operations through technology-driven solutions, with a strong focus on operational resilience, risk management and the protection of critical systems and data.
About the Role
The CISO will lead the company's information security strategy, oversee cybersecurity and ICT risk management, and ensure that security is embedded across business operations and product development. The role combines strategic leadership, technical expertise and regulatory oversight, with responsibility for developing a strong security function and strengthening the organisation's resilience.
Responsibilities
- Maintain and develop the information security strategy, policies and standards aligned with business objectives and regulatory requirements.
- Identify, assess and mitigate cybersecurity and ICT risks, maintaining the risk register and overseeing the company's information security controls and asset inventory.
- Lead security audits,
vulnerability management, penetration testing and security monitoring, ensuring timely remediation of identified issues.
- Ensure compliance with applicable security standards and regulations, including PCI DSS and ISO/IEC 27001, and support relevant audits and regulatory interactions.
- Integrate security requirements into product development, infrastructure changes and business processes, applying security-by-design principles.
- Develop and maintain business continuity and disaster recovery plans in collaboration with relevant teams.
- Build, lead and develop the information security team, establishing clear responsibilities, priorities and performance metrics.
- Promote security awareness and a strong security culture across the organisation.
Requirements
- 5+ years of experience in information security or cybersecurity, including at least 3 years in a leadership role.
- Strong experience in fintech, PSP,
📌 CISO (España)
🏢 Evotym
📍 España