Information Security Officer
Finst
Your career and the team
We’re looking for a hands-on Information Security Officer to join our team and take full ownership of our second-line IT risk and information security function. You’ll be reporting directly to the Chief Compliance Officer and work closely with engineering, product, and platform teams to build, challenge, and improve our security and compliance posture in line with DORA, ISO 27001, GDPR, AI Act, EEA Act and other relevant regulations.
Your daily adventures will include
Own and operate our second-line information security risk and compliance program
Lead the setup and operation of our ISMS, aligned with ISO 27001 standards
Drive compliance efforts with DORA, GDPR, AI act, and other relevant regulations
Review and challenge first-line teams on IT security practices, policies, and controls to identify and mitigate risks early
Define and maintain the IT risk management framework using best practices (e.g., ISO 27005, NIST)
Maintain IT compliance documentation, policies, and processes across the organization
Schedule, manage, and support audits, both internal and external
Review new tools and vendors, assist in software approval and due diligence processes
Track incidents, non-conformities, and risks—and follow up with remediation plans
Act as an internal advisor on best practices in security and compliance.
Why you will love it here
Great skills come with great benefits – we offer competitive fixed remuneration (evolving with you) + bonus scheme
Our top employees get rewarded with shares incentive plan – we want you to own it
Work with a tightly-knit and multi-cultural team of senior professionals – we strive to keep the talent density very high
Fast decision-making and open environment, freedom, trust, and the opportunity to make a unique impact
Work from a very cool office in the heart of Amsterdam
25 paid holidays per year to reload
Get the tech you need: MacBook, Windows, standing desks – you name it
Flexibility: although we like and encourage being together in the office, it ultimately doesn’t matter where and when you work, as long as you get it done
No office politics – we’re too busy changing the crypto industry
Monthly team drinks and yearly company off-sites – work hard, play harder