Chief Information Security Officer (CISO)

The Company is seeking a Chief Information Security Officer (CISO) to lead its information security program, technology risk framework, and security strategy. The role includes establishing and maintaining security governance, overseeing regulatory compliance, audits, risk assessments, and remediation, and reporting security posture and material risks to executive and board-level stakeholders. The CISO will lead incident response and readiness, business continuity planning, security controls, data protection, identity and access management, threat and vulnerability management, and third-party risk oversight. The position also involves setting secure development requirements, governing digital asset security, managing the security budget and performance metrics, and building a security-focused culture and team. Candidates should have at least 10 years of experience in information security, cybersecurity, or technology risk, including work in regulated financial services or comparable environments. They should have implemented an information security management system aligned with recognized frameworks and led at least one successful ISO 27001, SOC 2, or PCI DSS audit. Strong knowledge of cloud security, hybrid environments, APIs, and relevant financial and data protection regulations is required, along with experience reporting to boards and regulators and leading major incidents. Exceptional communication skills and fluent English are essential; Russian or Ukrainian is preferred. Certifications such as CISSP, CISM, CRISC, or ISO 27001 Lead Implementer/Auditor, as well as experience with digital asset security, regulatory inspections, or security automation, are advantageous.