Chief Information Security Officer

About the company

Job overview

Key responsibilities

• Develop and execute a security strategy and roadmap aligned with business objectives, risk appetite, and regulation.
• Lead and mentor security teams across operations, architecture, governance, and risk.
• Embed security in trading platforms and fintech products through secure SDLC practices, threat modeling, and security testing.
• Oversee 24/7 monitoring, threat detection, vulnerability management, and incident response.
• Maintain regulatory compliance, security policies, controls, and audit readiness across jurisdictions.
• Manage security risks associated with technology vendors, liquidity providers, fintech partners, and other third parties.
• Develop and manage the security budget and allocate resources according to risk priorities.
• Partner with executives, the board, regulators, legal, risk, and technology teams; communicate cyber risk in business terms.
• Track emerging threats, attack techniques, security technologies, and industry practices.
• Set KRIs, KPIs, and program metrics; lead crisis and breach response; report to senior management and the board.

Experience and qualifications

• At least 10 years of information security experience, including time in financial services or fintech, and a record of building and leading security programs.
• 5–8 years of senior leadership experience overseeing security teams, programs, and budgets.
• Strong understanding of financial-services cyber threats and defenses, including trading platforms, payments, cloud, blockchain, and emerging technologies.
• Deep technical expertise in security architecture, cloud security, identity and access management, network and application security, cryptography, and incident response.
• Experience developing and implementing security strategies, risk frameworks, and governance models such as ISO 27001, NIST CSF, PCI DSS, and SOC 2.
• Ability to ensure compliance with laws, regulations, and data protection requirements across jurisdictions.
• Bachelor's or master's degree in computer science, cybersecurity, engineering, or a related field.
• CISSP, CISM, CISA, or CCSP certifications are strongly preferred.
• Strong leadership and communication skills, including executive and board influence, consensus-building, and delivery of results.

Why join

• The employer advertises competitive salary and comprehensive employee benefits.
• The employer cites professional growth, career advancement, collaboration, and innovation.