Information Security Officer

Act as Information Security Officer for FinTech.

Support the implementation and ongoing maintenance of information security standards, including ISO 27001, SOCv2, DORA.

Coordinate security activities at the company level and ensure alignment with cyber security strategy.

Serve as a link between the Security team, company management, and technical teams.

Support security governance processes, including policies, procedures, risk assessments, control implementation, and audit evidence collection.

Coordinate internal stakeholders during security audits, assessments, remediation activities, and certification projects.

Track security risks, gaps, action items, and remediation progress.

Ensure proper communication of security requirements to business, product, IT, engineering, and infrastructure teams.

Support incident, vulnerability, access management, and compliance-related processes where company-level coordination is required.

Working with GRC-tool to collect evidence, automate risk assessment process, assess the controls and 3rd party vendors etc.

Prepare regular status updates, reports, and escalations for security leadership.

3+ years of experience in Information Security, IT Security, GRC, Compliance, Risk Management, or a similar role.

Practical experience with implementation, maintenance, or audit support for information security standards and frameworks, including ISO 27001, SOCv2, DORA.

Understanding of information security governance, risk management, policies, procedures, controls, and audit evidence collection.

Ability to coordinate security activities across technical and business teams.

Experience working with internal stakeholders, auditors, IT, engineering, infrastructure, product, and compliance teams.

Strong communication skills and ability to translate security requirements into clear business and technical actions.

Experience working with such GRC-tools as: Vanta, Drata etc.

English level sufficient for written communication, documentation, and audit-related activities.

Certification CISSP, CISM, ISO27001 Lead Implementer