Information Security Officer

Tradevest; Warszawa; On-site; PLN 180,000 - 240,000; Full time

Benefits offered by this job

B2B contract

Job summary

Tradevest is seeking an Information Security Officer to lead our information security strategy across the group, protecting data, systems and client trust in a fast-growing fintech environment.

You will coordinate security objectives with management, advise on information security issues, implement and evolve our ISMS, and ensure compliance with MaRisk, DORA and NIS2 across jurisdictions including Germany and Poland.

Qualifications

• 3+ years in information security leadership or officer roles in a fast-growing company.
• Certifications such as CISA, CISM, or ISO 27001 Lead Auditor are highly preferred.
• Strong knowledge of DORA, NIS2 and related regulatory requirements.

Responsibilities

• Coordinate information security objectives with Tradevest Group strategy.
• Advise management on information security issues and report status regularly.
• Establish and develop the ISMS based on the GRC software used.

Skills

Information security

Stakeholder collaboration

Business acumen

Policies & standards

Cyber security technologies

Education

CISA

CISM

ISO 27001 Lead Auditor

Tools

GRC software

Job description

Your role

Take ownership of our information security strategy and help protect what matters most: our data, our systems, and the trust our clients place in us. In this role, you'll ensure all Group companies meet the highest security standards and stay resilient against emerging threats.

Your Mission And Responsibilities

• Continuous coordination of information security objectives with the strategic objectives of the Tradevest Group.
• Work directly with the management advising them on information security issues and provide regular reports on the status of information security.
• Establishment, operation and further development of our information management system (ISMS) based on the GRC software we use.
• Creating and updating security guidelines and procedures in accordance with current standards and legal requirements (MaRisk, DORA etc.) arising from the different regulatory jurisdictions we operate in, such as Germany and Poland.
• Creation, coordination and implementation of audit procedures based on a multi-year audit plan.
• Coordination and follow-up of measures to address risks and prevent information security incidents.
• Recording and coordinating the handling of information security incidents as well as the corresponding analysis and follow-up of incidents.
• Coordinating the ongoing and on-demand performance of information risk analyses and related activities in close cooperation with process, information and risk owners.
• Supporting the implementation and documentation of emergency tests and updating the emergency manual in close cooperation with the process, information and risk owners.
• Coordination of target group-oriented awareness-raising and training measures on the topic of information security.
• Assessing the technical security posture of critical ICT third-party service providers in coordination with the Group's outsourcing management, including review of relevant certifications (e.g., ISO 27001, SOC 2)
• Planning, coordinating and evaluating the results of penetration testing and digital operational resilience testing pursuant to Art. 24–27 DORA

Your Qualifications And Experience

• At least three years of practical experience in the role of information security officer or in a comparable position in the field of information security in a fast-growing company.
• Certifications such as CISA, CISM, or ISO 27001 Lead Auditor are highly preferred.
• Very good knowledge of legal and regulatory requirements such as DORA (Digital Operational Resilience Act), NIS2 etc.
• Strong business acumen combined with an intuition for proactive collaboration with stakeholders across the company and group entities.
• Experience in implementing security strategies, policies, procedures, and standards.
• Extensive knowledge of current and emerging cyber security technologies, document management and security operations.

Contract

B2B

Location

Warsaw

About Us

Tradevest is a leading FinTech company offering an innovative platform for securities and cryptocurrency trading, specifically tailored for institutional clients. In Germany, Tradevest holds BaFin licenses as a securities institution, ensuring full regulatory compliance. With our cutting-edge development hub located in Warsaw, Tradevest Polska Sp. z o.o. we drive the technical innovation behind our products. Additionally, through our brand WAWEX, we operate a state-of-the-art cryptocurrency exchange, providing a seamless and secure trading experience. Our mission is to empower institutional traders with advanced tools and technologies that redefine the trading landscape.

WAWEX is a cutting-edge fintech platform at the forefront of the digital finance revolution. Empowering financial institutions, brokers, and banks, WAWEX delivers seamless access to over 75 cryptocurrencies, combining state-of-the-art security with unparalleled market depth. Through innovative tokenization and real-time market insights, WAWEX is shaping the future of trading. With robust API integrations and 24/7 availability, this dynamic platform is designed for institutions ready to embrace the fast-paced world of digital assets and unlock limitless opportunities in global finance.