Job
Core
Maintain the ISMS and ICT risk management framework, perform risk assessments, prepare for audits, and draft security policies for a licensed EMI.
Role type
Information Security Officer (GRC)
Builds
Security compliance framework and risk management processes
Domain
Financial services / Information Security
Required skills
ISMS management, risk assessment, audit preparation, policy drafting, regulatory tracking, vendor security assessment, automation
Preferred skills
Banking/EMI experience, PCI DSS/SWIFT CSP knowledge, DORA/NIS2/GDPR expertise, CISA/CRISC/CISM certification
Technologies
AI tooling, automation scripts
Responsibilities
Maintain ISMS records and risk registers, perform risk assessments and treatment plans, prepare for internal/external audits, draft and review security policies, analyze security KPIs/KRIs, assess new suppliers and vendors, respond to security questionnaires, track regulatory changes, update security awareness training, automate evidence collection and reporting