Position: Chief Information Security Officer
Company: 3commas.io
Experience required: 5y
English level: upper

We are looking for an experienced Information Security expert with a strategic mindset to join our team.

**Requirements: **

- 2+ years experience in IT Security as a Chief Security Officer or Security Consultant;
- Experience in Crypto/Blockchain domains will be a huge plus
- In-depth understanding of information security from a technological and management perspective
- Understanding cloud security (microservices security, secrets management, ...) GCP, AWS, Azure (one of)
- Knowledge of and (operational) experience with Vulnerability
- Management, Identity Management, Anti-Malware and/or Security Controls
- One or more external security certifications (CISSP, CISM, CISA, etc.) will be a huge plus also
- Ability to execute Security assessments, give advices and proper follow-up
- At least Upper-intermediate English

**Personal:**

- Extensive multi-tasking and prioritization skills; needs to excel in fast paced environment with frequently changing priorities and possess excellent ability to keep calm and collected during times of high pressure
- Ability to make accurate yet fast decisions with limited, complex or conflicting information
- A keen eye for detail, accuracy and strong critical thinking skills with advanced judgement capability
- Ability to plan strategically, but stay on top of tactical execution
- Strong management skills, including the ability to drive projects and initiatives for multiple lines of business
- Ability to explain security concepts both to the top management and tech\non-technical professionals

**Responsibilities:**

- Create, implement and actualize an organization-wide IT and Information Security Strategy aligned with business goals, tech challenges and emerging threats
- Develop and enhance an information security management framework
- Act as IT Security Evangelist spreading Security practices and information security awareness among the employees including top management
- Perform penetration tests
- Perform an information security audit 
- Integrate Information Security risk management into business decisions and operations
- Provide thought leadership in client and corporate security, privacy, risk, and compliance strategy and execution
- Identify, mitigate and communicate current and emerging security threats to services availability and data confidentiality
- Design security architecture elements to mitigate threats as they emerge
- Lead Security Risk Management process and govern security posture
Identify security design gaps in existing and proposed controls and recommend changes or enhancements

**What we offer:**

- Optionally work from the office in Tallinn or remotely
- Flexible schedule
- Paid annual leave, paid sick leave
- English lessons
- Competitive salary offers based on your skills