European CISO

FNZ Group; Ireland; On-site; EUR 70,000 - 100,000; Full time

Job summary

FNZ Group is seeking a Regional Information Security Officer in Ireland to lead a local operational security team. The role involves developing and implementing the Cyber Resilience strategy across FNZ, ensuring compliance with regulatory standards and managing stakeholder engagement.

The ideal candidate will have significant experience in financial services, strong knowledge of security frameworks, and professional information security qualifications. This role is pivotal in enhancing FNZ's information security maturity.

Qualifications

• Significant experience leading an Information Security team in Financial Services context.
• Good knowledge of practical implementation of information security frameworks.
• Exceptional ability to manage internal stakeholders and communicate concepts.

Responsibilities

• Lead information security management across businesses.
• Support Group CISO in the delivery of Cyber Resilience strategy.
• Manage relationships with clients and regulators.

Skills

Leading Information Security team

Risk management frameworks

Client and regulator relationship management

Communication of security concepts

Education

Professional Information Security qualifications (CISSP, CISM, CISA, CRISC)

Tools

ISO27001

NIST 800-53

COBIT

Job description

At FNZ, our purpose is to make wealth management more accessible, bringing easier, fairer and more inclusive solutions to people worldwide. Here in the Global Information Security team, we are on a mission to embed cyber resilience across FNZ, protecting the platforms that support investment solutions for over 20 million people. We are looking for an exceptional Regional Information Security Officer to develop and lead a local operational security team in the delivery of FNZ's cyber resiliency strategy. You will report into the Head of Information Security and have significant experience in regulated financial services. You will have good knowledge of a variety of information security frameworks, legal and regulatory requirements, coupled with an ability to communicate risk effectively to stakeholders of all levels. You will have previous experience of complex, rapidly changing environments. You will be able to rapidly identify areas of improvement and make changes for the good of the business. You will work alongside the wider business to implement excellent cyber resiliency practices across FNZ.

Specific Role Responsibilities

• Lead in the management of information security across in scope businesses.
• Manage business and external stakeholder (i.e. regulator, client) engagement.
• Lead the local development, implementation, delivery and support of FNZ's Cyber Resilience strategy in alignment with our organisational mission.
• Support the Group CISO in the delivery of the Group Cyber Resilience strategy.
• Contribute to the development and communication of corporate information security policy, standards and guidelines.
• Lead the local provision of services to support all client and regulatory requirements such as audit preparation, support for RFPs and contractual client information security committees.
• Lead a local team of Officers and/or Analysts to deliver a consistent global service, supporting the delivery of business goals with expert guidance.
• Lead the way in implementing security culture across the business.
• Lead the assessment, analysis and reporting of information and cyber security risks to the appropriate audiences.

Primary requirements

• Significant experience leading an Information Security team / function in a Financial Services context.
• Good knowledge of the practical implementation of information security and risk management frameworks such as ISO27001, NIST 800-53 and COBIT.
• Good knowledge of audit frameworks such as ISAE3402 and SOC2.
• Experienced in European regulations and legislation such as GDPR, DORA, AI ACT.
• Highly experienced in managing client and regulator relationships.
• Exceptional ability to manage internal stakeholders through a journey of improving information security maturity.
• Exceptional ability to communicate information security and risk concepts to stakeholders of all levels.
• Hold professional Information Security qualifications such as CISSP, CISM, CISA, CRISC.

Secondary requirements

• Experience in the implementation and management of ISO27001 certification.
• Experience delivering compliance with PCI DSS and Swift standards.
• Leading a small team of Information Security professionals.