Information Security Officer - EU Hybrid, Impact & Risk

Finom; Polska; Ibrido; PLN 180.000 - 260.000; Tempo pieno

Vantaggi offerti da questo lavoro

Stock options program

Work & Swim Program

Flexible work arrangements

Descrizione del lavoro

Finom, a European fintech, seeks an Information Security Officer to own security compliance and risk management across EU markets. You will work within a mature ISMS, collaborating with Cyber Security, Risk, Legal & Compliance, and Internal Audit to ensure practical, continuous compliance beyond paperwork.

You report to the CISO and help keep controls, policies, and vendor assessments current while leveraging AI tooling to automate evidence and reporting.

Competenze

• 4+ years of experience in information security compliance, ISMS or related areas.
• Experience with ISO/IEC 27001: working with an ISMS and certification/audit processes.
• Experience with information security risk assessments, risk registers and risk treatment plans.
• Ability to translate standards and regulatory requirements into practical controls and evidence.

Mansioni

• Maintain the ISMS and ICT risk management framework records and evidence repository.
• Conduct and refresh information security risk assessments and track risk treatment plans.
• Prepare for internal and external audits, certifications and assessments with evidence collection.
• Run periodic checks of control design and operating effectiveness and raise remediation gaps.
• Draft and maintain information security policies, procedures and guidelines.
• Collect and analyse ISMS KPIs/KRIs and prepare security reporting for management.
• Assess security of new suppliers and periodic reassessments with Risk, Legal and DPO.
• Respond to security/compliance questionnaires from partners, customers and regulators.
• Review new projects/vendors from information security and compliance perspective.
• Monitor regulatory changes and propose necessary updates to controls.

Conoscenze

Information security

ISMS

GRC

ISO/IEC 27001

Risk assessment

Security questionnaires

English writing

Formazione

ISO/IEC 27001 Lead Implementer

CISA

CRISC

CISM

Strumenti

Auditing tools

Risk management software

Descrizione del lavoro

Finom, a European fintech, seeks an Information Security Officer to own security compliance and risk management across EU markets. You will work within a mature ISMS, collaborating with Cyber Security, Risk, Legal & Compliance, and Internal Audit to ensure practical, continuous compliance beyond paperwork.

You report to the CISO and help keep controls, policies, and vendor assessments current while leveraging AI tooling to automate evidence and reporting.