Information Security Officer - ISO 27001, Risk & Compliance (EU)

OpenKrill; United States; Hybrid; USD 120.000 - 170.000; Vollzeit

Benefits dieser Stelle

Stock options

Remote/hybrid across Europe

Work & Swim program

Zusammenfassung

Finom is seeking an Information Security Officer to join our Cyber Security team and own security compliance and risk management day to day. You will work with a mature ISMS, audits, risk registers and reporting, partnering with Risk, Legal & Compliance, and Engineering to keep controls effective.

You will drive improvements, leverage AI and automation, and report to the CISO while collaborating with teams across Europe in a security‑minded culture.

Qualifikationen

• 4+ years of information security compliance, ISMS, GRC or related areas.
• Experience with ISO/IEC 27001: working with an ISMS and preparing for certification or surveillance audits.
• Experience with information security risk assessments, risk registers and risk treatment plans.
• Experience answering security questionnaires and due diligence requests from partners, customers or regulators.
• Able to translate standards and regulatory requirements into practical controls, procedures and evidence that people actually follow.
• Hands-on and self-driven: you own tasks end to end, work directly with people to solve problems and do not wait for a perfect methodology before acting.
• Open to AI tools and automation and actively use them in day-to-day work.
• Strong written English and clear documentation skills.

Aufgaben

• Maintain ISMS and ICT risk management framework records: document, ownership, evidence repository.
• Perform and refresh information security risk assessments; maintain risk register; track treatment plans.
• Prepare for and manage internal and external audits, certifications, and assessments; coordinate evidence and findings to closure.
• Run periodic checks of control design and operating effectiveness; raise remediation gaps.
• Draft and maintain information security policies, procedures and guidelines; prepare for annual review.
• Collect and analyze ISMS KPIs and KRIs; prepare management security reports.
• Assess new suppliers and reassess existing ones with Risk, Legal and DPO.
• Prepare responses to security/compliance questionnaires from partners and regulators.
• Review new projects, products, vendors from information security and compliance perspective.
• Track regulatory changes; propose required changes.
• Maintain company-wide security awareness and training materials.
• Automate evidence collection, control checks, questionnaire answering and reporting with templates, scripts and AI tooling.

Kenntnisse

ISMS & GRC

ISO 27001

Risk assessments

Security questionnaires

Regulatory controls

Automation & AI tools

English writing

Jobbeschreibung

Finom is seeking an Information Security Officer to join our Cyber Security team and own security compliance and risk management day to day. You will work with a mature ISMS, audits, risk registers and reporting, partnering with Risk, Legal & Compliance, and Engineering to keep controls effective.

You will drive improvements, leverage AI and automation, and report to the CISO while collaborating with teams across Europe in a security‑minded culture.