Senior Information Security Specialist(m/w/x)

Description

Scaling ISO 27001 operations and DORA compliance for a multi-asset investment platform. Proven track record in audit leadership and GRC remediation required. Stock option plan, 25 days work-from-anywhere policy.

Requirements

• •Experience in information security GRC or related
• •Track record leading audits and remediation
• •Knowledge of ISO 27001 and DORA
• •Understanding of technology risk and governance
• •Excellent written and verbal communication skills

Tasks

• •Lead and scale security governance in a regulated fintech environment
• •Own complex, cross-functional GRC domains end-to-end
• •Manage ISMS and ISO 27001 operations at scale
• •Drive measurable improvement in control effectiveness
• •Advise senior stakeholders on security matters
• •Develop strategy and success metrics for risk governance
• •Tighten controls for critical and regulated assets
• •Streamline low-risk areas for an efficient posture
• •Facilitate high-impact risk assessments for new products and architecture
• •Challenge risk assessments for critical vendors
• •Drive risk treatment by aligning owners and negotiating timelines
• •Track risk commitments and escalate residual risks
• •Lead complex, regulator-facing audits and assessments
• •Manage audit readiness, walkthroughs, and remediation
• •Design and run risk-based control testing programs
• •Implement durable remediation through process fixes and automation
• •Translate regulatory requirements into structured internal work programs
• •Set due diligence and monitoring requirements for critical suppliers
• •Partner with Procurement and Legal on security contract requirements
• •Ensure enforceable obligations across the supply chain
• •Mentor Specialists, Associates, and Senior Associates
• •Set quality standards for documentation and stakeholder engagement
• •Translate GRC requirements for engineering and operations teams

Tools & Technologies

Benefits