Information Security & Compliance Lead

Finom; Madrid; On-site; EUR 70,000 - 90,000; Full time

Job summary

Finom is seeking an Information Security Officer to own security compliance and risk management within the Cyber Security team in Madrid. You will maintain the ISMS, run risk assessments, and coordinate audits with audit partners, risk, legal and the DPO.

You’ll craft policies, report KPIs, and drive improvements across suppliers and projects. You will work hands-on, translate regulatory requirements into practical controls, and leverage AI tooling to automate evidence collection and reporting.

Qualifications

• Experience with information security compliance, ISMS, and risk management.
• Hands-on with ISO/IEC 27001 certification processes and audits.
• Strong written English and documentation skills.
• 4+ years in information security compliance, GRC, or related areas.
• Experience with banking, payments or EMIPCI DSS, SWIFT CSP, or payment schemes.
• Knowledge of DORA, NIS2 and GDPR including RoPA and DPIA with a DPO.
• Certifications such as ISO 27001 Lead Implementer/Auditor, CISA/CRISC/CISM.

Responsibilities

• Maintain ISMS records, risk register, and evidence repository.
• Perform and refresh risk assessments, track treatment plans.
• Prepare for audits, collect evidence, coordinate with auditors.
• Review projects for information security and privacy compliance.
• Run control design and effectiveness checks and raise remediation gaps.
• Develop and maintain security policies and guidelines.
• Prepare security and risk reports for management.
• Assess new suppliers and revisit existing ones with Risk, Legal and DPO.
• Answer security questionnaires from partners, customers, regulators.
• Automate evidence collection and reporting with templates, scripts, AI tooling.

Skills

Information security

Risk management

Policy development

Documentation

English writing

Education

ISO 27001 Lead Implementer

CISA

CRISC

CISM

Tools

AI tooling

Automation scripts

Security questionnaires

Job description

Finom is seeking an Information Security Officer to own security compliance and risk management within the Cyber Security team in Madrid. You will maintain the ISMS, run risk assessments, and coordinate audits with audit partners, risk, legal and the DPO.

You’ll craft policies, report KPIs, and drive improvements across suppliers and projects. You will work hands-on, translate regulatory requirements into practical controls, and leverage AI tooling to automate evidence collection and reporting.