[Hiring] Information Security Officer @Coinspaid

Role Description

Act as Information Security Officer for FinTech.

• Support the implementation and ongoing maintenance of information security standards, including ISO 27001, SOCv2, DORA.
• Coordinate security activities at the company level and ensure alignment with cyber security strategy.
• Serve as a link between the Security team, company management, and technical teams.
• Support security governance processes, including policies, procedures, risk assessments, control implementation, and audit evidence collection.
• Coordinate internal stakeholders during security audits, assessments, remediation activities, and certification projects.
• Track security risks, gaps, action items, and remediation progress.
• Ensure proper communication of security requirements to business, product, IT, engineering, and infrastructure teams.
• Support incident, vulnerability, access management, and compliance-related processes where company-level coordination is required.
• Working with GRC-tool to collect evidence, automate risk assessment process, assess the controls and 3rd party vendors etc.
• Prepare regular status updates, reports, and escalations for security leadership.

Qualifications

• 3+ years of experience in Information Security, IT Security, GRC, Compliance, Risk Management, or a similar role.
• Practical experience with implementation, maintenance, or audit support for information security standards and frameworks, including ISO 27001, SOCv2, DORA.
• Understanding of information security governance, risk management, policies, procedures, controls, and audit evidence collection.
• Ability to coordinate security activities across technical and business teams.
• Experience working with internal stakeholders, auditors, IT, engineering, infrastructure, product, and compliance teams.
• Strong communication skills and ability to translate security requirements into clear business and technical actions.
• Experience working with such GRC-tools as: Vanta, Drata etc.
• English level sufficient for written communication, documentation, and audit-related activities.
• Certification CISSP, CISM, ISO27001 Lead Implementer.

Requirements

• 3+ years of experience in Information Security, IT Security, GRC, Compliance, Risk Management, or a similar role.
• Practical experience with implementation, maintenance, or audit support for information security standards and frameworks, including ISO 27001, SOCv2, DORA.
• Understanding of information security governance, risk management, policies, procedures, controls, and audit evidence collection.
• Ability to coordinate security activities across technical and business teams.
• Experience working with internal stakeholders, auditors, IT, engineering, infrastructure, product, and compliance teams.
• Strong communication skills and ability to translate security requirements into clear business and technical actions.
• Experience working with such GRC-tools as: Vanta, Drata etc.
• English level sufficient for written communication, documentation, and audit-related activities.
• Certification CISSP, CISM, ISO27001 Lead Implementer.

Benefits

• Flexible monthly budget (up to €230/month) for sports, mental health, coworking, home office, or medical-related expenses.
• Fully remote work from almost anywhere.
• Optional offices and relocation support.
• Flexible, async-friendly environment.
• Budget for courses, certifications, and professional development.
• Language learning support.
• Cross-team learning and knowledge sharing.
• Medical insurance or reimbursement depending on location.
• Access to mental health support.
• Financial support for important life events.
• Merch shop with rewards system.
• Team offsites and company events.