Information Security Officer — EU Remote & Stock Options

Finom; España; Hybrid; EUR 70,000 - 110,000; Full time

Benefits offered by this job

Stock options

Work & Swim Program

EU remote/hybrid across Europe

Job summary

Finom seeks an Information Security Officer to own security compliance and risk management within its Cyber Security team. You will improve and operate an established ISMS, coordinate audits, and drive evidence-based improvements across risk, governance, and vendor assessments.

You will report to the CISO and collaborate with Engineering, Risk, Legal & Compliance, Internal Audit and DPO teams. The role emphasizes practical controls, automation, and proactive risk mitigation to protect Finom’s EU

Qualifications

• Experience maintaining ISMS and risk registers.
• Translate standards into practical controls and evidence.
• Proven record with audits and certifications.
• Strong English writing and documentation skills.
• Experience automating security workflows with AI tools.

Responsibilities

• Maintain the ISMS and ICT risk framework records with ownership.
• Refresh information security risk assessments and risk treatment plans.
• Prepare for internal and external audits and certifications.
• Run checks on control design and operating effectiveness.
• Draft and maintain information security policies and guidelines.
• Analyze ISMS KPIs/KRIs and report to management.
• Assess new suppliers for security and privacy impact.
• Respond to security/compliance questionnaires from partners.
• Review new projects from security/compliance perspective.
• Track regulatory changes and propose updates.
• Keep security awareness materials up to date.
• Automate evidence collection and reporting with templates and AI.

Skills

ISMS/GRC expertise

ISO/IEC 27001 awareness

Risk assessments & risk registers

Security questionnaires & due dillig

Control design & evidence collection

Documentation & policy drafting

AI tools & automation

Written English

Education

ISO 27001 Lead Implementer or Lead Auditor

Bachelor's degree in CS/InfoSec

Tools

ISMS tooling

Audits & compliance tools

Job description

Finom seeks an Information Security Officer to own security compliance and risk management within its Cyber Security team. You will improve and operate an established ISMS, coordinate audits, and drive evidence-based improvements across risk, governance, and vendor assessments.

You will report to the CISO and collaborate with Engineering, Risk, Legal & Compliance, Internal Audit and DPO teams. The role emphasizes practical controls, automation, and proactive risk mitigation to protect Finom’s EU