Position: Head/Director of IT and Information Security for a fintech product company
Company: Code Space
Experience required: 5y
English level: upper

Your responsibilities will be the following:

- Participate in digital bank platform development as responsible for security requirements and management;
- Implement IT governance and security regulations (policies and standards) according to established standards (e.g. ISO 27001);
- Cooperate with delivery team to implement security regulations and procedures;
- Analyze and evaluate risks of security relevant changes as well as identify vulnerabilities / security risks and draw up proposals for improvements and/or initiate countermeasures;
- Design, assess and improve IT Controls ( based on EBA security guidelines);
- Business continuity management;
- Managing a small team of IT support engineers;
- Implementation and management of IT services using the principles and methods associated with industry best practices (e.g. ITIL);
- Develop Service Level Agreement (SLA) templates and negotiate complex SLAs.

What we are looking for: 

- 5+ Years experience in IT security management roles;
- Nice to have: Hands-on experience in IT Operations and IT Management;
- Expert knowledge and experience in Information Security and IT with regard to concepts, methodologies, technologies and products (such as OWASP, COBIT, ITIL, etc);
- Expert knowledge in security in Web-technologies (e.g. Application Security, API-Security, Mobile Security, AWS Cloud Security) and experience on facilitation of 3rd party penetration testing;
- Practical experience in large enterprises and audit participation;
- Have a degree in Security/Engineering, Computer science;
- Good understanding and practical experience on security systems and processes (IAM, Encryption, Network security, WAF, IPS/IDS, SIEM, DLP);
- Expert knowledge in technical Information security architecture;
- Ability for independent decision-making and issue resolution;
- Leadership commitment;
- Strong team orientation;
- Upper-intermediate English;
- Security certifications (e.g. CEH, ECSA/LPT, CISP, CCSP) are an asset;
- Experience in a large international banking environment is an asset.

If you are interested, just drop me a line 🙂