Information Security & Business Continuity Manager (Fintech)

TL;DR

Information Security & Business Continuity Manager (Cybersecurity): Leading the definition and implementation of security and business continuity practices for a mission-critical electronic trading platform with an accent on risk management and regulatory compliance. Focus on maintaining ISMS/BCMS documentation, coordinating business continuity tests, and ensuring alignment with ISO 27001, NIST, and Bank of Italy guidelines.

Location: Milan, Italy (on-site or hybrid)

Company

Leading European capital market providing a comprehensive value chain for listing, trading, clearing, and settlement.

What you will do

• Lead the implementation of the hirify.global Security Programme, designing and overseeing necessary controls and processes.
• Maintain and update Information Security (ISMS) and Business Continuity (BCMS) Management System documentation.
• Oversee the Information Security Risk Management Framework and coordinate the implementation of mitigating actions.
• Coordinate periodic business continuity tests and act as the Business Continuity Coordinator.
• Ensure compliance with ISO 27001, NIST, ISO 22301, and Italian cybersecurity regulations.
• Promote security awareness and oversee vulnerability management across the organization.

Requirements

• Solid experience with risk management frameworks and cyber best practices, preferably in financial services.
• Deep understanding of GRC principles, business continuity, and operational resilience.
• Fluent in English and Italian (both written and spoken).
• Ability to collaborate across teams and geographies and work independently.
• Strong judgment and composure in high-stress or crisis situations.

Nice to have

• Experience with leading security technologies and solutions.
• Previous experience in IT audit.

Culture & Benefits

• Dynamic and international work environment.
• Opportunity to work on a leading electronic trading platform within the hirify.global Group.
• Culture of collaboration, accountability, and continuous improvement.