EU Information Security & Compliance Lead

Finom; España; Hybrid; EUR 70,000 - 110,000; Full time

Benefits offered by this job

Stock Options Program

Work & Swim Program

Flexible across Europe (remote/hybrid)

Equal opportunity employer

Job summary

Finom is seeking an Information Security Officer to own security compliance and risk management across our EU operations. You will work on an established ISMS, drive audits, risk assessments and continuous improvement with cross‑functional teams in Cyber Security, Risk, Legal & Compliance, and Internal Audit.

You will report to the CISO, collaborate with Engineering and Risk teams, and help translate regulatory requirements into practical controls, evidence, and repeatable processes you can

Qualifications

• 4+ years of information security, ISMS, GRC or related areas.
• Experience with ISO/IEC 27001 ISMS and audits.
• Experience with information security risk assessments and risk registers.
• Experience answering security questionnaires and due diligence requests.
• Able to translate standards into practical controls and evidence.
• Hands-on and self-driven with end-to-end ownership.
• Open to AI tools and automation in day-to-day work.
• Strong written English and documentation skills.

Responsibilities

• Maintain the ISMS and ICT risk management framework records: document and records register, control ownership and evidence repository.
• Perform and refresh information security risk assessments, maintain the risk register, prepare risk treatment plans and track their implementation with control owners.
• Prepare for and go through internal and external audits, certifications and assessments: own the calendar, collect evidence, work directly with auditors and track findings to closure.
• Run periodic checks of control design and operating effectiveness and raise gaps for remediation.
• Draft and maintain information security policies, procedures and guidelines and prepare them for annual review and approval.
• Collect and analyse ISMS KPIs and KRIs and prepare the regular security and risk reporting for management.
• Perform security assessments of new suppliers and periodic reassessments of existing ones together with Risk, Legal and the DPO.
• Prepare responses to security and compliance questionnaires from partners, customers and regulators.
• Review new projects, products and vendors from an information security and compliance perspective.
• Track changes in cybersecurity, ICT risk and privacy regulation and supervisory guidance, assess impact and propose required changes.
• Keep company-wide security awareness and training materials relevant and up to date.
• Automate evidence collection, control checks, questionnaire answering and reporting with templates, scripts and AI tooling.

Skills

ISMS/GRC experience

ISO/IEC 27001 knowledge

Risk assessments

Security questionnaires

AI tools & automation

English communication

Job description

Finom is seeking an Information Security Officer to own security compliance and risk management across our EU operations. You will work on an established ISMS, drive audits, risk assessments and continuous improvement with cross‑functional teams in Cyber Security, Risk, Legal & Compliance, and Internal Audit.

You will report to the CISO, collaborate with Engineering and Risk teams, and help translate regulatory requirements into practical controls, evidence, and repeatable processes you can