Chief Information Security Officer (CISO)

Evotym; United States; Remote; USD 180,000 - 350,000; Full time

Benefits offered by this job

Конкурентная зарплата

Прозрачная командная культура

Высокий потенциал влияния в финтех

Социальные бонусы

Публичное признание достижений

Job summary

Evotym объявляет подборку на должность руководителя информационной безопасности (CISO). Компания–международный игрок в области цифровых финансовых услуг, где вы возглавите стратегию информационной безопасности, регуляторное соответствие и управление киберрисками, обеспечивая защиту критических систем и данных в операциях и разработке продуктов.

Ключевая роль включает руководство командой безопасности, развитие программ управления угрозами, аудитами и тестированием, а также взаимодействие с

Qualifications

• 5+ лет в информационной безопасности, 3+ года на руководящей должности.
• Опыт в финтех/ PSP и финансовой среде.
• Понимание PCI DSS, ISO/IEC 27001, ISO 27005, ISO 31000, NIST.
• Опыт управления ICT-рисками, SIEM, уязвимости, тесты на проникновение.
• Умение взаимодействовать с регуляторами, аудиторами.
• Свободное владение английским и русским.

Responsibilities

• Разработка стратегии информационной безопасности и политик.
• Управление рисками безопасности и активами.
• Проведение аудита, тестов на проникновение и мониторинг.
• Обеспечение соответствия PCI DSS, ISO 27001 и аудитов.
• Интеграция требований безопасности в разработку и инфраструктуру.
• Разработка планов восстановления и непрерывности бизнеса.
• Формирование и развитие команды информационной безопасности.
• Повышение осведомлённости сотрудников о безопасности.

Skills

Information security

Leadership

Risk management

English and Russian

Fintech security

Tools

SIEM

Vulnerability scanners

Job description

Описание

Our client is an international technology business operating in the digital financial services sector. The company supports complex business operations through technology-driven solutions, with a strong focus on operational resilience, risk management and the protection of critical systems and data. The CISO will lead the company's information security strategy, oversee cybersecurity and ICT risk management, and ensure that security is embedded across business operations and product development. The role combines strategic leadership, technical expertise and regulatory oversight, with responsibility for developing a strong security function and strengthening the organisation's resilience.

Задачи

• Maintain and develop the information security strategy, policies and standards aligned with business objectives and regulatory requirements.
• Identify, assess and mitigate cybersecurity and ICT risks, maintaining the risk register and overseeing the company's information security controls and asset inventory.
• Lead security audits, vulnerability management, penetration testing and security monitoring, ensuring timely remediation of identified issues.
• Ensure compliance with applicable security standards and regulations, including PCI DSS and ISO/IEC 27001, and support relevant audits and regulatory interactions.
• Integrate security requirements into product development, infrastructure changes and business processes, applying security-by-design principles.
• Develop and maintain business continuity and disaster recovery plans in collaboration with relevant teams.
• Build, lead and develop the information security team, establishing clear responsibilities, priorities and performance metrics.
• Promote security awareness and a strong security culture across the organisation.

Требования

• 5+ years of experience in information security or cybersecurity, including at least 3 years in a leadership role.
• Strong experience in fintech, PSP, payment processing or another security-sensitive financial technology environment.
• Proven track record of developing and implementing information security strategies and managing enterprise-wide security risks.
• Practical knowledge of PCI DSS, ISO/IEC 27001, ISO/IEC 27005, ISO 31000, NIST frameworks and other relevant security standards.
• Experience with ICT risk management, risk registers, asset inventories, SIEM, vulnerability management, penetration testing and OWASP security practices.
• Experience participating in product development and integrating security into the software development lifecycle.
• Experience communicating with regulators, auditors and senior business stakeholders.
• Excellent communication, analytical and reporting skills.
• Fluent English and Russian are required.
• Ownership and accountability, taking responsibility for security and following tasks through to completion.
• Strategic thinking, setting priorities and balancing security needs with business goals.
• Leadership through influence, building trust and encouraging teams to follow security best practices.
• Cross-cultural communication, working effectively with colleagues from different backgrounds.

Условия

• Competitive salary aligned with experience.
• Collaborative and transparent team culture.
• High-impact role in a scaling fintech company.
• Recognition of personal milestones and achievements.
• Social benefits.