Chief Information Security Officer (CISO)

Evotym; Polska; Híbrido; PLN 300 000 - 420 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Competitive salary

Transparent team culture

High-impact fintech role

Milestones recognition

Social benefits

Resumo da oferta

Evotym is seeking a Chief Information Security Officer to lead the information security strategy across the business, overseeing cybersecurity, risk management and regulatory compliance. This role requires embedding security into product development and operations, with a focus on resilience and risk mitigation.

You will build and lead a security function, working with regulators, auditors and senior stakeholders to strengthen the organisation's security posture while promoting a culture of

Qualificações

• 5+ years of experience in information security or cybersecurity, including at least 3 years in a leadership role.
• Strong experience in fintech, PSP, payment processing or another security-sensitive financial technology environment.
• Proven track record of developing and implementing information security strategies and managing enterprise-wide security risks.
• Practical knowledge of PCI DSS, ISO/IEC 27001, ISO/IEC 27005, ISO 31000, NIST frameworks and other relevant security standards.
• Experience with ICT risk management, risk registers, asset inventories, SIEM, vulnerability management, penetration testing and OWASP security practices.
• Experience participating in product development and integrating security into the software development lifecycle.
• Experience communicating with regulators, auditors and senior business stakeholders.
• Excellent communication, analytical and reporting skills.
• Fluent English and Russian are required.

Responsabilidades

• Maintain and develop the information security strategy, policies and standards aligned with business objectives and regulatory requirements.
• Identify, assess and mitigate cybersecurity and ICT risks, maintaining the risk register and overseeing the company's information security controls and asset inventory.
• Lead security audits, vulnerability management, penetration testing and security monitoring, ensuring timely remediation of identified issues.
• Ensure compliance with applicable security standards and regulations, including PCI DSS and ISO/IEC 27001, and support relevant audits and regulatory interactions.
• Integrate security requirements into product development, infrastructure changes and business processes, applying security-by-design principles.
• Develop and maintain business continuity and disaster recovery plans in collaboration with relevant teams.
• Build, lead and develop the information security team, establishing clear responsibilities, priorities and performance metrics.
• Promote security awareness and a strong security culture across the organisation.

Conhecimentos

Leadership

Information security

Regulatory communication

Security strategy

Fintech knowledge

Security risk management

Cross-cultural communication

Fluent English

Russian language

Ferramentas

SIEM

Descrição da oferta de emprego

About the Client

Our client is an international technology business operating in the digital financial services sector. The company supports complex business operations through technology-driven solutions, with a strong focus on operational resilience, risk management and the protection of critical systems and data.

About the Role

The CISO will lead the company's information security strategy, oversee cybersecurity and ICT risk management, and ensure that security is embedded across business operations and product development. The role combines strategic leadership, technical expertise and regulatory oversight, with responsibility for developing a strong security function and strengthening the organisation's resilience.

Responsibilities

• Maintain and develop the information security strategy, policies and standards aligned with business objectives and regulatory requirements.

• Identify, assess and mitigate cybersecurity and ICT risks, maintaining the risk register and overseeing the company's information security controls and asset inventory.

• Lead security audits, vulnerability management, penetration testing and security monitoring, ensuring timely remediation of identified issues.

• Ensure compliance with applicable security standards and regulations, including PCI DSS and ISO/IEC 27001, and support relevant audits and regulatory interactions.

• Integrate security requirements into product development, infrastructure changes and business processes, applying security-by-design principles.

• Develop and maintain business continuity and disaster recovery plans in collaboration with relevant teams.

• Build, lead and develop the information security team, establishing clear responsibilities, priorities and performance metrics.

• Promote security awareness and a strong security culture across the organisation.

Requirements

• 5+ years of experience in information security or cybersecurity, including at least 3 years in a leadership role.

• Strong experience in fintech, PSP, payment processing or another security-sensitive financial technology environment.

• Proven track record of developing and implementing information security strategies and managing enterprise-wide security risks.

• Practical knowledge of PCI DSS, ISO/IEC 27001, ISO/IEC 27005, ISO 31000, NIST frameworks and other relevant security standards.

• Experience with ICT risk management, risk registers, asset inventories, SIEM, vulnerability management, penetration testing and OWASP security practices.

• Experience participating in product development and integrating security into the software development lifecycle.

• Experience communicating with regulators, auditors and senior business stakeholders.

• Excellent communication, analytical and reporting skills.

• Fluent English and Russian are required.

Key Soft Skills

• Ownership and accountability, taking responsibility for security and following tasks through to completion.

• Strategic thinking, setting priorities and balancing security needs with business goals.

• Leadership through influence, building trust and encouraging teams to follow security best practices.

• Cross-cultural communication, working effectively with colleagues from different backgrounds.

What We Offer

• Competitive salary aligned with experience.

• Collaborative and transparent team culture.

• High-impact role in a scaling fintech company.

• Recognition of personal milestones and achievements.

• Social benefits.