Information Security Officer

FinDock; Netherlands; On-site; EUR 90,000 - 150,000; Full time

Benefits offered by this job

Stock Appreciation Rights

Pension

Hybrid working

Travel allowance

Phone allowance

Volunteer days

Learning budget

Job summary

FinDock, the #1 Customer Payment Management solution built on Salesforce, is seeking an Information Security Officer to mature and drive our information security program. You will own the ISMS, lead certifications, and partner with Product, Engineering and Sales to ensure security is integrated into everything we do.

You will shape strategy, manage risk, and foster a security-first culture across a growing cloud-native SaaS.

Qualifications

• 2 years of experience in information security, GRC, or DevSecOps.
• Knowledge of ISO 27001, SOC 2, frameworks and secure software development practices.
• Proven experience in risk management, including risk assessments, mitigation planning, and maintaining risk registers.
• Hands-on experience with security tooling (SAST, DAST, Secrets Management, Awareness training).
• Excellent communication skills and ability to engage with both technical and executive audiences.
• A proactive, pragmatic, and hands-on mindset, with ownership and accountability.
• Experience in cloud-native SaaS environments, with APIs, CI/CD pipelines and Infrastructure as Code (IaC).
• Experience automating security and compliance processes to reduce manual work and improve visibility.
• Experience running a SOC2 or ISO27001 audit cycle is a pré.

Responsibilities

• Mature and execute FinDock's information security management system.
• Execute a security strategy and multi-year roadmap.
• Manage certifications, leading ISO 27001/SOC 2 cycles and owning internal risk governance.
• Operate the ISMS including policies and processes such as vulnerability management, incident response, awareness sessions and disaster recovery tests.
• Strengthen customer trust by keeping information security up to date and supporting Sales in communicating FinDock's security posture.
• Collaborate cross-functionally with Product, Engineering and Operations to align security with innovation.
• Embed a security-first culture, leading awareness initiatives, training programs, and security simulations.
• Stay ahead of emerging threats and regulatory changes by proactively identifying risks and improving security posture.

Skills

InfoSec experience

GRC

DevSecOps

ISO 27001

SOC 2

Security frameworks

Secure SDLC

Risk management

SAST

DAST

Secrets management

Awareness training

Communication skills

Ownership mindset

Cloud-native SaaS

APIs

CI/CD

IaC

Security automation

SOC2 audit

ISO27001 audit

Job description

Ready to shape how the world sees security and trust in payments?

Join FinDock as our Information Security Officer

At FinDock, we believe payments should do more than process transactions - they should build trust, deepen relationships, and deliver happiness. As the #1 Customer Payment Management solution built natively on Salesforce, we empower organizations to deliver seamless, secure, and personalized payment experiences.

FinDock. For Customer Payment Happiness.

What's your role?

FinDock helps organizations manage payments and donations directly on Salesforce. As our customer base and product offering grow, securing our systems, customer data, and platform integrity is more critical than ever.

What you'll Do:

• Mature and execute FinDock's information security management system
• Execute a security strategy and multi-year roadmap
• Manage certifications, leading ISO 27001/SOC 2 cycli and owning internal risk governance
• Operate the Information Security Management System including its policies and processes amongst others but not limited to vulnerability management, incident response, awareness sessions and disaster recovery tests
• Strengthen customer trust by keeping information security up to date and supporting Sales in effectively communicating FinDock's security posture
• Collaborate cross-functionally with Product, Engineering and Operations to align security with innovation
• Embed a security-first culture, leading awareness initiatives, training programs, and security simulations
• Stay ahead of emerging threats, evolving security practices and regulatory changes by proactively identifying risks and continuously improving our security posture.

What makes you the perfect fit?

You combine technical security knowledge with a pragmatic mindset. You enjoy working across teams, know how to balance security with business needs, and are comfortable taking ownership of a broad security domain.

You bring:

• 2 years of experience in information security, GRC, or DevSecOps
• Knowledge of ISO 27001, SOC 2,frameworks and secure software development practices
• Proven experience in risk management, including risk assessments, mitigation planning, and maintaining risk registers
• Hands-on experience with security tooling (SAST, DAST, Secrets Management, Awareness training)
• Excellent communication skills and ability to engage with both technical and executive audiences
• A proactive, pragmatic, and hands on mindset, with a strong sense of ownership and accountability
• Experience in cloud-native SaaS environments, with a solid understanding of modern application architectures, APIs, CI/CD pipelines and Infrastructure as Code.
• Experience automating security and compliance processes to reduce manual work and improve visibility
• Experience running a SOC2 or ISO27001 audit cycle is a pré

Why join FinDock?

Make an impact:

Help shape how FinDock grows securely, serves customers with confidence, and builds trust across the Salesforce ecosystem.

Grow with us:

Grow your influence across systems, teams, and trust. Your voice will shape how we protect, scale, and build secure-by-default practices.

Enjoy our perks:

• Stock Appreciation Rights
• Pension
• hybrid working
• Travel and phone allowance
• Paid volunteer days
• 5K euros Personal learning budget

Thrive in our culture:

Join a passionate team where learning is constant, progress beats perfection, and support is a given. We challenge with care, celebrate small wins, and work with trust and purpose.

At FinDock, happiness isn't just for our customers - it's for our team, too.

Ready to build the trust behind every payment? We'd love to hear from you.

Contact Boryana Delcheva. We're excited to hear from you!