Information Security Officer

About the role

Our client, a leading international FinTech organisation, is looking for an experienced Information Security Officer to strengthen the second line of defence and drive ICT risk and resilience initiatives in a regulated environment.

Key responsibilities

• Monitor ICT risk regulations (including DORA) and act as the primary contact with the CSSF.
• Engage stakeholders to ensure clear ownership and delivery of security and resilience objectives.
• Oversee governance across key processes and provide structured reporting.
• Drive the ICT risk management roadmap and manage regulatory change.
• Lead resilience testing programmes and coordinate internal and external teams.
• Promote a strong culture of information security through awareness initiatives.

Required profile

• Degree in Business Administration, Computer Science or a related field.
• 7+ years of experience in information security, preferably in regulated environments.
• Strong knowledge of ISO 27001, NIST, DORA, EBA guidelines and ICT risk frameworks.
• Excellent communication skills in English; German is an advantage.
• Relevant certifications such as CISSP or CISM are a plus.

Required skills

• ISO 27001
• NIST framework
• DORA regulations
• EBA guidelines
• ICT risk frameworks
• CISSP certification (optional)
• CISM certification (optional)