Information Security Specialist (Crypto)

Revolut Ltd; United Kingdom; Remote; GBP 90,000 - 140,000; Full time

Benefits offered by this job

Financial benefits that show we value 

Flexibility to work from home, the офф

Revolut Metal subscription loaded with

Exciting events year-round

Job summary

Revolut Ltd. is seeking a highly technical Information Security Specialist (Crypto) to uphold top-tier 2nd line of defence for IT and InfoSec operations within a fast-growing fintech environment.

You will conduct security risk assessments for crypto services, oversee third-party security, and ensure compliance with DORA, PSD2, and other crypto-specific regulations, while promoting a culture of security across Revolut.

Qualifications

• Experience in senior/lead InfoSec roles in 2LoD.
• Experience with cryptoasset service providers or digital assets.
• Strong technical security expertise for crypto environments.
• Experience managing intra-group InfoSec/IT outsourcing in regulated settings.
• Proven ability to implement local IT/InfoSec policies complying with DORA, MICA, PSD2.
• Deep understanding of crypto and financial sector compliance.
• Knowledge of digital operational resilience frameworks and crypto regs.
• CISSP and/or CISM certifications.

Responsibilities

• Conduct ICT security risk assessments and control evaluations, incl. crypto wallet risks.
• Review new crypto initiatives and monitor crypto service providers.
• Monitor and challenge group security controls for regulatory compliance.
• Oversee third-party security and outsourcing chains.
• Review penetration testing, vulnerability scans, and resilience frameworks.
• Assess and resolve security incidents and regulatory reporting obligations.
• Coordinate audits and assurance activities with group/external stakeholders.
• Promote adoption of group InfoSec policies locally and culture of security.
• Contribute to digital operational resilience testing with tech leadership.
• Provide regular reporting on security resilience to management and regulators.

Skills

InfoSec leadership

Cryptoasset experience

Technical security

Outsourcing management

Regulatory compliance

Crypto regulatory knowledge

Digital operational resilience

CISSP/CISM certs

Job description

Information Security Specialist (Crypto)

Remote: UK

About Revolut

People deserve more from their money. More visibility, more control, and more freedom. Since 2015, Revolut has been on a mission to deliver just that. Our powerhouse of products — including spending, saving, investing, exchanging, travelling, and more — help our 80+ million customers get more from their money every day.

As we continue our lightning-fast growth, 2 things are essential to our success: our people and our culture. In recognition of our outstanding employee experience, we've been certified as a Great Place to Work™. So far, we have 13,000+ people working around the world, from our offices and remotely, to help us achieve our mission. And we're looking for more brilliant people. People who love building great products, redefining success, and turning the complexity of a chaotic world into the simplicity of a beautiful solution.

About the role

Our Information Security team protects Revolut's systems, data, and people. They combine technical expertise with a proactive, risk-based mindset to stay ahead of threats and keep our technology and customers secure at every step.

We're looking for a highly technical Information Security Manager to uphold top-tier 2nd line of defence practices for our IT and InfoSec operations.

Up to shape what's next in finance? Let's get in touch.

What you'll be doing

• Conducting regular ICT security risk assessments and control evaluations, including cybersecurity risks for custodian and self-custody wallets, and responses to wallet attacks
• Reviewing new crypto initiatives, and monitoring crypto service providers
• Monitoring and challenging group-level security controls (AppSec, InfoSec, testing, incident response) to ensure local regulatory compliance
• Overseeing third-party security, outsourcing chains, and crypto service providers
• Reviewing penetration testing, vulnerability scans, and resilience frameworks (BCP, DR, failover)
• Assessing, classifying, and resolving security incidents and threats, including regulatory reporting obligations
• Coordinating audits, inspections, and assurance activities with group and external stakeholders
• Ensuring the adoption of group InfoSec policies locally, while promoting a culture of security throughout the business
• Contributing to digital operational resilience testing (e.g., DORA-aligned exercises) with tech leadership
• Providing regular reporting on security resilience to management and regulators

What you'll need

• Expertise in InfoSec and IT operations in a senior or lead role, particularly within the 2LoD
• Experience with cryptoasset service providers or financial institutions handling digital assets
• Advanced proficiency in technical security disciplines and information security requirements tailored to crypto environments
• Experience managing intra-group outsourcing of InfoSec and IT services in regulated settings
• A track record of delivering localised group IT/InfoSec policies and procedures to comply with regulatory standards, including DORA, MICA, and PSD2
• An in-depth understanding of compliance requirements for cryptoasset services and the broader financial sector
• Knowledge of relevant compliance and regulatory frameworks, with a focus on digital operational resilience and crypto-specific regulations
• Relevant information security certifications (CISSP and/or CISM)

Building a global financial super app isn’t enough. Our Revoluters are a priority, and that’s why in 2021 we launched our inaugural D&I Framework, designed to help us thrive and grow everyday. We’re not just doing this because it’s the right thing to do. We’re doing it because we know that seeking out diverse talent and creating an inclusive workplace is the way to create exceptional, innovative products and services for our customers. That’s why we encourage applications from people with diverse backgrounds and experiences to join this multicultural, hard-working team.

Important notice for candidates:

Job scams are on the rise. Please keep these guidelines in mind when applying for any open roles.

Only apply through official Revolut channels. We don’t use any third-party services or platforms for our recruitment.

Always double-check the emails you receive. Make sure all communications are being done through official Revolut emails, with an @revolut.com domain.

We won't ask for payment or personal financial information during the hiring process. If anyone does ask you for this, it’s a scam. Report it immediately.

By submitting this application, I confirm that all the information given by me in this application for employment and any additional documents attached hereto are true to the best of my knowledge and that I have not wilfully suppressed any material fact. I confirm I have disclosed if applicable any previous employment with Revolut. I accept that if any of the information given by me in this application is in any way false or incorrect, my application may be rejected, any offer of employment may be withdrawn or my employment with Revolut may be terminated summarily or I may be dismissed. By submitting this application, I agree that my personal data will be processed in accordance with Revolut's Candidate Privacy Notice

Get what you need to succeed

• Financial benefits that show we value your work
• Flexibility to work from home, the office, or abroad
• A Revolut Metal subscription loaded with perks
• Exciting events year-round so you can get to know your team