CISO

Evotym; Spain; On-site; EUR 120,000 - 180,000; Full time

Benefits offered by this job

Competitive salary

Collaborative culture

High-impact fintech role

Recognition of milestones

Social benefits

Job summary

Evotym is seeking a CISO to lead our information security strategy and drive cybersecurity across fintech operations. You will govern risk management, asset inventories, and security controls, aligning strategy with PCI DSS and ISO standards while collaborating with regulators and senior stakeholders.

You will build and mature the security function, oversee audits, penetration testing and security monitoring, and promote a security-first culture across product development and IT teams.

Qualifications

• 5+ years in information security or cybersecurity.
• 3+ years in a leadership role.
• Strong fintech/security domain experience including risk management.

Responsibilities

• Maintain and develop the information security strategy, policies and standards aligned with business objectives and regulatory requirements.
• Identify, assess and mitigate cybersecurity and ICT risks, maintain risk register and oversee information security controls.
• Lead security audits, vulnerability management, penetration testing and security monitoring with timely remediation.
• Ensure compliance with PCI DSS, ISO/IEC 27001, ISO/IEC 27005, ISO 31000, NIST and related standards; support audits.
• Integrate security requirements into product development and infrastructure changes; apply security-by-design principles.
• Develop and maintain business continuity and disaster recovery plans with relevant teams.
• Build and lead the information security team with clear responsibilities and metrics.
• Promote security awareness and a strong security culture across the organisation.

Skills

Leadership

Strategic thinking

Communication

Ownership

Cross-cultural communication

Analytical

Reporting

Tools

SIEM

Job description

About The Client

Our client is an international technology business operating in the digital financial services sector. The company supports complex business operations through technology-driven solutions, with a strong focus on operational resilience, risk management and the protection of critical systems and data.

About The Client

Our client is an international technology business operating in the digital financial services sector. The company supports complex business operations through technology-driven solutions, with a strong focus on operational resilience, risk management and the protection of critical systems and data.

About The Role

The CISO will lead the company's information security strategy, oversee cybersecurity and ICT risk management, and ensure that security is embedded across business operations and product development. The role combines strategic leadership, technical expertise and regulatory oversight, with responsibility for developing a strong security function and strengthening the organisation's resilience.

Responsibilities

• Maintain and develop the information security strategy, policies and standards aligned with business objectives and regulatory requirements.
• Identify, assess and mitigate cybersecurity and ICT risks, maintaining the risk register and overseeing the company's information security controls and asset inventory.
• Lead security audits, vulnerability management, penetration testing and security monitoring, ensuring timely remediation of identified issues.
• Ensure compliance with applicable security standards and regulations, including PCI DSS and ISO/IEC 27001, and support relevant audits and regulatory interactions.
• Integrate security requirements into product development, infrastructure changes and business processes, applying security-by-design principles.
• Develop and maintain business continuity and disaster recovery plans in collaboration with relevant teams.
• Build, lead and develop the information security team, establishing clear responsibilities, priorities and performance metrics.
• Promote security awareness and a strong security culture across the organisation.

Requirements

• 5+ years of experience in information security or cybersecurity, including at least 3 years in a leadership role.
• Strong experience in fintech, PSP, payment processing or another security-sensitive financial technology environment.
• Proven track record of developing and implementing information security strategies and managing enterprise-wide security risks.
• Practical knowledge of PCI DSS, ISO/IEC 27001, ISO/IEC 27005, ISO 31000, NIST frameworks and other relevant security standards.
• Experience with ICT risk management, risk registers, asset inventories, SIEM, vulnerability management, penetration testing and OWASP security practices.
• Experience participating in product development and integrating security into the software development lifecycle.
• Experience communicating with regulators, auditors and senior business stakeholders.
• Excellent communication, analytical and reporting skills.
• Fluent English and Russian are required.

Key Soft Skills

• Ownership and accountability, taking responsibility for security and following tasks through to completion.
• Strategic thinking, setting priorities and balancing security needs with business goals.
• Leadership through influence, building trust and encouraging teams to follow security best practices.
• Cross‑culture communication, working effectively with colleagues from different backgrounds.

What We Offer

• Competitive salary aligned with experience.
• Collaborative and transparent team culture.
• High‑impact role in a scaling fintech company.
• Recognition  of personal milestones and achievements.
• Social benefits.