2 months ago
Head of Information Security (Fintech)
Match & Cover letter
Plus required for matching with this vacancy
Job description
Text:
TL;DR
Head of Information Security (Fintech): Leading and scaling global information security governance, risk, and compliance across a highly regulated fintech environment with an accent on ISMS development, international audits, and regulatory compliance. Focus on automating GRC processes with Vanta and agentic AI, managing security risks across multiple jurisdictions, and enabling secure business growth.
Location: On-site in Limassol, Cyprus; relocation support to Belgrade, Serbia is available.
Company
is a global fintech company operating across regulated markets and international jurisdictions.
What you will do
- Develop and enhance the Information Security Management System.
- Lead the global Governance, Risk & Compliance function and manage a high-impact information security team.
- Drive security governance, risk management, third-party risk management, and security awareness initiatives.
- Lead and support ISO 27001, PCI DSS, and other international audits and regulatory assessments.
- Partner with Engineering, Compliance, Legal, Privacy, Risk, Internal Audit, and business stakeholders.
- Automate and standardize GRC processes using Vanta and AI-driven solutions.
Requirements
- 7+ years of experience in information security, including at least 2 years in a leadership role.
- Strong expertise in GRC, ISMS, risk management, and security compliance.
- Hands-on experience with ISO 27001 and PCI DSS audits.
- Experience leading teams and collaborating with business stakeholders, auditors, and regulators.
- Background in fintech, banking, payments, or crypto is highly preferred.
Culture & Benefits
- Opportunity to influence the information security strategy of a global fintech company.
- Modern technology environment focused on automation and AI adoption.
- Relocation support to Belgrade, Serbia.
- Competitive compensation, annual performance bonus, and comprehensive benefits package.
Be careful: if the employer asks you to log into their system using iCloud/Google, send codes/passwords, or run code/software, don't do it - these are scammers. Always click "Report" or contact support. More in guide →