Remote ISMS Lead — Security & Compliance (Equity)

Startup Atlas; Amsterdam; Hybrid; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Bonus scheme

Shares incentive plan

Office in Amsterdam (cool office)

Job summary

Finst is seeking an Information Security Officer to own the second-line IT risk and information security function. You will report to the Chief Compliance Officer and collaborate with engineering, product and platform teams to enhance security and compliance in line with DORA, ISO 27001, GDPR and other regulations.

You will lead the ISMS, drive audits, review security practices, and act as an internal advisor on best practices.

Qualifications

• 3–5 years in information security, IT risk or compliance.
• Experience with ISMS implementation (ISO 27001).
• Knowledge of DORA, GDPR.
• Certification a plus (ISO 27001 LA/LI, CISA, CISSP).
• Strong communication and audits coordination.

Responsibilities

• Own and operate second-line information security risk and compliance.
• Lead ISMS setup aligned with ISO 27001.
• Drive compliance with DORA, GDPR, AI Act.
• Review IT security practices in first line.
• Maintain IT risk management framework.
• Coordinate audits and due diligence.
• Advise on security best practices.
• Track incidents and remediation.

Skills

Information security

IT risk management

DORA & GDPR

ISMS management

Cloud infra & CI/CD

Audits & compliance

Communication skills

Ownership & proactive

ISO 27001 LA/LI

CISA

CISSP

Tools

ISO 27001 LA/LI

Job description

Finst is seeking an Information Security Officer to own the second-line IT risk and information security function. You will report to the Chief Compliance Officer and collaborate with engineering, product and platform teams to enhance security and compliance in line with DORA, ISO 27001, GDPR and other regulations.

You will lead the ISMS, drive audits, review security practices, and act as an internal advisor on best practices.