Information Security Officer -- Remote EU Role with Stock Options

DutchTechX; Polska; Hybrid; PLN 180,000 - 280,000; Full time

Benefits offered by this job

Stock options

Hybrid work

Work & Swim program

EU mobility

Job summary

Finom is seeking an Information Security Officer to join our Cyber Security team and take ownership of security compliance and risk management across EU markets. You will work with a mature ISMS, collaborating with Cyber Security, Engineering, Risk, Legal & Compliance, and Internal Audit to ensure practical, ongoing compliance.

You will report to the CISO and help keep control processes, evidence, and reporting up to date while identifying opportunities to improve security posture across the

Qualifications

• 4+ years of information security compliance, ISMS, GRC or related areas.
• Experience with ISO/IEC 27001: working with ISMS and audits.
• Experience with information security risk assessments, risk registers and risk treatment plans.
• Ability to translate standards into practical controls and evidence.
• Strong written English and documentation skills.

Responsibilities

• Maintain the ISMS and ICT risk management framework records and evidence repository.
• Perform and refresh information security risk assessments and track risk treatment plans.
• Prepare for and go through internal/external audits, certifications and assessments.
• Run periodic checks of control design and operating effectiveness and raise gaps for remediation.
• Draft and maintain information security policies, procedures and guidelines.

Skills

ISMS

ISO 27001

Risk assessment

Vendor due diligence

Documentation

Tools

Audit tools

Job description

Finom is seeking an Information Security Officer to join our Cyber Security team and take ownership of security compliance and risk management across EU markets. You will work with a mature ISMS, collaborating with Cyber Security, Engineering, Risk, Legal & Compliance, and Internal Audit to ensure practical, ongoing compliance.

You will report to the CISO and help keep control processes, evidence, and reporting up to date while identifying opportunities to improve security posture across the