Chief Information Security Officer — Global FinTech, Equity

UMO; United States; Remoto; USD 220.000 - 320.000; Tempo pieno

Descrizione del lavoro

UMO, a stealth-mode FinTech venture, seeks a senior Information Security Leader to own the information security programme end-to-end. You will report to the CEO, chair the ISSC, and drive a Zero Trust security architecture across our markets, including regulatory environments in the DIFC, UAE, and Africa.

You will lead governance, audits, data protection, IAM, and threat management, while aligning with ISO 27001, NIST, SOC 2, and PCI DSS.

Competenze

• 10+ years in Information Security or Technology Risk roles.
• ISMS implementation aligned with ISO 27001, NIST, or equivalent frameworks.
• Led ISO 27001, SOC 2, or PCI DSS audits/attestations.
• Cloud security across AWS, GCP, and Azure.
• Fluent English; Russian/Ukrainian languages preferred.

Mansioni

• Own the information security strategy, programme, and roadmap, reporting to the CEO.
• Escalate material risks to the Board and block risky releases or changes.
• Governance of the Technology Risk Management Framework, ISMS, and compliance with ISO 27001, NIST, SOC 2, PCI DSS.
• Provide structured risk reporting to the Board, ISSC, and ExCo.
• Oversee regulatory cyber reporting to DFSA, CBUAE, VARA, and African regulators.
• Lead audits: ISO 27001 certification, SOC 2, PCI DSS assessments, and remediation.
• Oversee asset management, data protection, IAM, threat & vulnerability management, and security controls.
• Lead incident response, BCM/DR planning, and security awareness programs.

Conoscenze

Leadership

Information security

Risk management

Governance

Incident management

Board reporting

Security automation

Strumenti

AWS security

GCP security

Azure security

Descrizione del lavoro

UMO, a stealth-mode FinTech venture, seeks a senior Information Security Leader to own the information security programme end-to-end. You will report to the CEO, chair the ISSC, and drive a Zero Trust security architecture across our markets, including regulatory environments in the DIFC, UAE, and Africa.

You will lead governance, audits, data protection, IAM, and threat management, while aligning with ISO 27001, NIST, SOC 2, and PCI DSS.