Information Security Officer (Fintech)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
TL;DR
Information Security Officer (Fintech): Managing and operating the information security framework, risk assessments, and third-party oversight within a regulated payment environment with an accent on GRC and regulatory compliance. Focus on translating complex regulations like DORA and NIS 2 into actionable policies and maintaining the ISMS.
Location: Hybrid in Stockholm, Sweden
Company
A global leader in Open Banking Payments establishing Pay by Bank as the new standard at checkout.
What you will do
- Develop and maintain the information security framework (ISMS) aligned with regulatory requirements and industry standards.
- Lead information security risk assessments, define risk treatment plans, and maintain the risk register.
- Assess the security posture of third-party vendors, define contractual requirements, and drive remediation of gaps.
- Ensure business continuity, disaster recovery, and crisis management capabilities meet regulatory requirements.
- Coordinate internal and external audits, manage certifications, and respond to customer due diligence requests.
- Promote security awareness across the organization and manage the security incident and exception processes.
Requirements
- 5+ years of experience in information security, focusing on GRC, preferably in regulated financial services or payments.
- Strong working knowledge of ISO/IEC 27001.
- Practical experience translating regulations such as DORA, NIS 2, PSD2, and EBA guidelines into policies.
- Proven experience with third-party risk management across the vendor lifecycle.
- Fluent in English, written and spoken.
- Experience leading teams or managing large-scale security projects.
Nice to have
- Familiarity with the NIST CSF framework.
- Relevant certifications such as CISM, ISO 27001 Lead Implementer, CISA, or CISSP.
- Fluency in Swedish.
Culture & Benefits
- 20 to 30 days of annual holiday.
- Monthly team outing allowance for social events.
- Parental leave top-up for new parents.
- Daily breakfast and on-site perks.
- Well-being support including health allowance for gym memberships and massages.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →