Information Security Officer

Coinspaid Dev is the engineering brand behind the technology, infrastructure, and R&D expertise built within Coinspaid. With more than 120 engineersand over 11 years of industry experience, Coinspaid Dev brings together software engineering, infrastructure, security and R&D teams with experience building distributed systems and blockchain infrastructure operating across more than 20 blockchain networks.

Coinspaid Dev emerges as an independent engineering brand with a straightforward mission: to advance blockchain infrastructure engineering and contribute practical expertise back to the industry. The structure is new. The experience behind it is not.

Responsibilities:

Act as Information Security Officer for FinTech.

Support the implementation and ongoing maintenance of information security standards, including ISO 27001, SOCv2, DORA.

Coordinate security activities at the company level and ensure alignment with cyber security strategy.

Serve as a link between the Security team, company management, and technical teams.

Support security governance processes, including policies, procedures, risk assessments, control implementation, and audit evidence collection.

Coordinate internal stakeholders during security audits, assessments, remediation activities, and certification projects.

Track security risks, gaps, action items, and remediation progress.

Ensure proper communication of security requirements to business, product, IT, engineering, and infrastructure teams.

Support incident, vulnerability, access management, and compliance-related processes where company-level coordination is required.

Working with GRC-tool to collect evidence, automate risk assessment process, assess the controls and 3rd party vendors etc.

Prepare regular status updates, reports, and escalations for security leadership.

Requirements:

3+ years of experience in Information Security, IT Security, GRC, Compliance, Risk Management, or a similar role.

Practical experience with implementation, maintenance, or audit support for information security standards and frameworks, including ISO 27001, SOCv2, DORA.

Understanding of information security governance, risk management, policies, procedures, controls, and audit evidence collection.

Ability to coordinate security activities across technical and business teams.

Experience working with internal stakeholders, auditors, IT, engineering, infrastructure, product, and compliance teams.

Strong communication skills and ability to translate security requirements into clear business and technical actions.

Experience working with such GRC-tools as: Vanta, Drata etc.

English level sufficient for written communication, documentation, and audit-related activities.

Certification CISSP, CISM, ISO27001 Lead Implementer

Why join CryptoProcessing by Coinspaid You’ll be joining a company that is actively shaping its space – with enough scale to matter and enough room to make an impact. At Coinspaid, people are expected to think, contribute, and take ownership – and are supported in doing so. We focus on flexibility, wellbeing, and long-term growth – without overcomplicating how benefits work. Flexible Benefits Benefit Bar – up to €230/monthA flexible monthly budget you can use for what matters most to you – from sports and mental health to coworking, home office, or medical-related expenses. Work & Flexibility Fully remote work from almost anywhere Optional offices and relocation support Flexible, async-friendly environment Growth & Learning Budget for courses, certifications, and professional development Language learning support Cross-team learning and knowledge sharing Wellbeing & Support Medical insurance or reimbursement depending on location Access to mental health support Financial support for important life events Extras Merch shop with rewards system Team offsites and company events Sounds good? Well then, we can’t wait to see your resume! To learn more please visit: https://coinspaid.com/about-us/ & https://coinspaid.com/careers/

Verified from the employer's public Lever job collection. The provider-supplied title, description, location and application URL were normalized without inferring unstated facts.