Information Security Officer

The Information Security Officer is a senior leader responsible for Ondato's information security program. The role directs security strategy, operations, governance to protect information assets, systems, applications, infrastructure, data, products and services. It ensures the confidentiality, integrity and availability of information while maintaining alignment with applicable laws, regulatory requirements and recognized security practices.

The Information Security Officer oversees the Information Security Management System (ISMS), partners with executive leadership and technical teams, and works with suppliers, auditors and regulators to implement effective administrative, technical, organizational and physical controls.

What you will do

• Define, maintain and oversee implementation of the company's information security strategy, ISMS, security program, policies, standards and procedures.
• Direct security operations and contribute current expertise and a forward-looking security perspective to business technology planning.
• Ensure compliance with applicable requirements and frameworks, including ISO/IEC 27001:2022, ISO/IEC 27701, SOC 2, the NIST Cybersecurity Framework, GDPR, DORA and NIS2.
• Embed secure-by-design principles and modern defense practices in products and services developed internally or obtained from third parties.
• Lead periodic information security risk assessments. Identify, evaluate, prioritize and monitor risks, threats and vulnerabilities, and oversee mitigation and remediation plans of identified issues.
• Define and oversee administrative, technical, organizational and physical controls that protect infrastructure, data, services and electronically protected information.
• Ensure effective access controls, audit controls and periodic review of security-relevant activity and audit records, including logons, file access, updates, edits and printing.
• Manage security incidents, events and data breaches, including investigation, evidence gathering, analysis, tracking and reporting to management and regulators.
• Ensure that business continuity, disaster recovery and related security requirements are addressed and regularly maintained.
• Manage supplier security risk, including assessments, ongoing monitoring, contract and vendor negotiations, managed services, and validation of supplier controls against legal and company requirements.
• Collaborate with executive management, the Data Protection Officer, the Chief Technology Officer, technical teams, auditors and regulators to establish and sustain security governance.
• Promote security awareness and a strong cybersecurity culture across IT and the wider business, driving appropriate behavioral change.
• Advise the Chief Information Security & Product Compliance Officer and executive team on emerging risks, regulatory trends and strategic priorities.

What we are looking for

• Degree in a security- or technology-related field.
• At least 5 years of experience in information security, cybersecurity, IT security or risk management, including senior leadership experience within a service provider or financial institution.
• Strong knowledge of EU regulatory requirements, particularly DORA and NIS2, and of security and compliance frameworks including ISO/IEC 27001, ISO/IEC 27701, SOC 2 and NIST CSF.
• Innovative thinking and proven ability to lead and motivate cross-functional, interdisciplinary teams.
• Experience in supplier management, contract and vendor negotiations, and managed services.

Nice to have

• Professional certifications such as CISM, CISA, CISSP, or ISO/IEC 27001 Lead Auditor/Lead Implementer are highly desirable.

What We Offer

• Work with a talented, mission-driven team, shaping the future of digital identity.
• Monthly salary from 4500 to 7000 EUR gross per month. A different range may be considered based on experience and recruitment performance.
• A hybrid working model to support flexibility and a healthy work-life balance.
• Private health insurance to give you peace of mind for all your health needs.
• An extra paid day off every month to help you recharge.
• One-off financial support for significant personal life events.
• Company-wide and team events that bring everyone together.

Get in touch for more information and grab this amazing opportunity!