Information Security Officer - financial services

PAYALLY GLOBAL; Warszawa; On-site; PLN 180,000 - 280,000; Full time

Job summary

PAYALLY GLOBAL seeks an experienced Information Security Officer to own and continuously improve its information and cyber security programme. This standalone, hands-on role reports to the CTO and blends strategic oversight with practical risk mitigation and remediation.

The candidate will drive security monitoring, incident response, vulnerability management, and third-party risk assessments, ensuring regulatory compliance and a strong security culture across the organisation.

Qualifications

• 5+ years' experience in information or cyber security.
• Experience within payments, e-money, banking or another regulated financial institution.
• A track record of building, owning or materially improving a security programme.
• Strong hands-on experience across security monitoring, incident response, vulnerability management and security controls.
• Experience with SIEM/security monitoring and investigating security events.
• Experience managing penetration testing and driving remediation.
• Experience with third-party and cloud security assessments.
• Knowledge of frameworks such as ISO 27001, NIST or CIS Controls.
• Understanding of financial-services regulatory and operational-resilience requirements.
• Ability to work independently and communicate security risks effectively to senior stakeholders.

Responsibilities

• Own and continuously improve PAYALLY GLOBAL's information and cyber security framework, policies, controls, risk register and security roadmap.
• Take a hands-on role in security monitoring, incident response, vulnerability management, access control, endpoint, network and cloud security.
• Identify security weaknesses proactively and work with Technology to implement practical improvements.
• Own the vulnerability-management process and coordinate penetration testing and remediation.
• Maintain security monitoring and incident-response processes, including investigation and lessons learned.
• Conduct security risk assessments and provide clear reporting on key risks and remediation.
• Own security due diligence for technology suppliers, outsourcing partners and cloud providers.
• Support regulatory requirements, audits and independent security reviews.
• Maintain appropriate security standards and evidence across the organisation.
• Run security awareness and phishing programmes and help build a strong security culture.
• Act as PAYALLY GLOBAL's internal subject-matter expert and primary point of contact for information and cyber security.

Skills

Security governance

Incident response

Vulnerability management

Security monitoring

Cloud security

Third-party risk management

Security risk communication

Regulatory awareness

Tools

SIEM

Penetration testing tools

Cloud security tools

Job description

PAYALLY GLOBAL is looking for an experienced Information Security Officer to own and continuously improve our information and cyber security programme.

This is a standalone, hands‑on role reporting directly to the CTO. We need someone who can operate strategically while remaining close to the technology – identifying risks, improving controls, investigating security issues and driving remediation.

Previous experience within payments, e-money, banking or another regulated financial institution is essential.

Key Responsibilities

• Own and continuously improve PAYALLY GLOBAL's information and cyber security framework, policies, controls, risk register and security roadmap.
• Take a hands‑on role in security monitoring, incident response, vulnerability management, access control, endpoint, network and cloud security.
• Identify security weaknesses proactively and work with Technology to implement practical improvements.
• Own the vulnerability‑management process and coordinate penetration testing and remediation.
• Maintain security monitoring and incident‑response processes, including investigation and lessons learned.
• Conduct security risk assessments and provide clear reporting on key risks and remediation.
• Own security due diligence for technology suppliers, outsourcing partners and cloud providers.
• Support regulatory requirements, audits and independent security reviews.
• Maintain appropriate security standards and evidence across the organisation.
• Run security awareness and phishing programmes and help build a strong security culture.
• Act as PAYALLY GLOBAL's internal subject‑matter expert and primary point of contact for information and cyber security.

Candidate Requirements

• 5+ years' experience in information or cyber security.
• Experience within payments, e-money, banking or another regulated financial institution.
• A track record of building, owning or materially improving a security programme.
• Strong hands‑on experience across security monitoring, incident response, vulnerability management and security controls.
• Experience with SIEM/security monitoring and investigating security events.
• Experience managing penetration testing and driving remediation.
• Experience with third‑party and cloud security assessments.
• Knowledge of frameworks such as ISO 27001, NIST or CIS Controls.
• Understanding of financial‑services regulatory and operational‑resilience requirements.
• Ability to work independently and communicate security risks effectively to senior stakeholders.
• Nice to have:
• CISSP, CISM, CRISC, SANS/GIAC or equivalent.
• ISO 27001 experience.
• PCI DSS experience.

About You

You are proactive, pragmatic and hands‑on. You don't just identify security risks or write policies – you take ownership of getting issues resolved.

As PAYALLY GLOBAL's dedicated security specialist, you'll have the opportunity to shape our security programme, work directly with the CTO and have a meaningful impact on how security develops as the business grows.

About PAYALLY GLOBAL

PAYALLY GLOBAL is a group of financial institutions that provides comprehensive and tailored financial solutions for businesses and private clients with global ambitions.

As the financial industry becomes increasingly automated, PAYALLY GLOBAL remains committed to maintaining a personal approach. Each client is supported by a dedicated Relationship Manager who ensures precision, trust, and consistency in every interaction.

As a principal member of Visa and Mastercard, PAYALLY GLOBAL offers a fully integrated suite of financial services designed to meet the complex needs of international operations. The company’s global infrastructure enables seamless cross‑border payments in 39 currencies, ensuring efficiency, compliance, and transparency across all transactions.

Its services include international and local payments, multi‑currency accounts, foreign exchange, debit cards, card issuing, and payment gateways, all managed within one secure environment.

PAYALLY GLOBAL combines global reach with human precision to deliver financial solutions that inspire confidence and support sustainable growth.