European CISO

FNZ; Dublin; On-site; EUR 80,000 - 120,000; Full time

Job summary

FNZ is seeking a Regional Information Security Officer in Dublin, Ireland, to lead local operational security and enhance cyber resilience. The ideal candidate will have significant experience in financial services, a profound understanding of security frameworks, excellent stakeholder communication skills, and relevant professional qualifications. This role involves managing complex security challenges and driving improvements across the organization, contributing to the overall cyber security strategy and ensuring compliance with regulatory standards.

Qualifications

• Significant experience leading an Information Security team in Financial Services.
• Good knowledge of information security frameworks and risk management.
• Exceptional ability to communicate risk concepts to stakeholders.

Responsibilities

• Lead information security management across in-scope businesses.
• Own the delivery of FNZ’s Cyber Resilience strategy.
• Manage relationships with clients and regulators.

Skills

Leadership in Information Security

Stakeholder communication

Knowledge of ISO27001

Regulatory compliance (GDPR)

Client relationship management

Education

Professional Information Security qualifications (CISSP, CISM, CISA, CRISC)

Tools

ISO27001

NIST 800-53

COBIT

Job description

At FNZ, our purpose is to make wealth management more accessible, bringing easier, fairer and more inclusive solutions to people worldwide. Here in the Global Information Security team, we are on a mission to embed cyber resilience across FNZ, protecting the platforms that support investment solutions for over 20 million people. We are looking for an exceptional Regional Information Security Officer to develop and lead a local operational security team in the delivery of FNZ’s cyber resiliency strategy. You will report into the Head of Information Security and have significant experience in regulated financial services. You will have good knowledge of a variety of information security frameworks, legal and regulatory requirements, coupled with an ability to communicate risk effectively to stakeholders of all levels. You will have previous experience of complex, rapidly changing environments. You will be able to rapidly identify areas of improvement and make changes for the good of the business. You will work alongside the wider business to implement excellent cyber resiliency practices across FNZ.

Specific Role Responsibilities

• Lead in the management of information security across in scope businesses.
• Manage business and external stakeholder (i.e. regulator, client) engagement.
• Lead the local development, implementation, delivery and support of FNZ’s Cyber Resilience strategy in alignment with our organisational mission.
• Support the Group CISO in the delivery of the Group Cyber Resilience strategy.
• Contribute to the development and communication of corporate information security policy, standards and guidelines.
• Lead the local provision of services to support all client and regulatory requirements such as audit preparation, support for RFPs and contractual client information security committees.
• Lead a local team of Officers and/or Analysts to deliver a consistent global service, supporting the delivery of business goals with expert guidance.
• Lead the way in implementing security culture across the business.
• Lead the assessment, analysis and reporting of information and cyber security risks to the appropriate audiences.

Primary Requirements

• Significant experience leading an Information Security team / function in a Financial Services context.
• Good knowledge of the practical implementation of information security and risk management frameworks such as ISO27001, NIST 800-53 and COBIT.
• Good knowledge of audit frameworks such as ISAE3402 and SOC2.
• Experienced in European regulations and legislation such as GDPR, DORA, AI ACT.
• Highly experienced in managing client and regulator relationships.
• Exceptional ability to manage internal stakeholders through a journey of improving information security maturity.
• Exceptional ability to communicate information security and risk concepts to stakeholders of all levels.
• Hold professional Information Security qualifications such as CISSP, CISM, CISA, CRISC.

Secondary Requirements

• Experience in the implementation and management of ISO27001 certification.
• Experience delivering compliance with PCI DSS and Swift standards.
• Leading a small team of Information Security professionals.