CISO

This is your chance to bring real-time value to a Fintech startup aiming large!

As CISO you will be responsible for keeping the companys products and data secure.

The company processes player payments holds liquidity and run smart contracts (BCT) that move real value which potentially makes them a target.

Reporting to the CTO and the BoD You will ensure resilience to cyber attacks and ICT disruptions and that the confidentiality integrity and availability of IT systems and client data is beyond reproach.
This is a hands-on security leadership role where your focus is on defending the company.

This is a Malta-based role not available on a remote basis. Salary idea 90-100K benefits.

Role & Responsibilities

• Own information security strategy

• Build policies and procedures to industry best practice

• Threat detection incident response and escalation: building the playbooks running the drills and leading the response when something happens

• Cybersecurity controls and security monitoring across our services networks cloud infrastructure and smart contracts

• Regular security risk assessments vulnerability management penetration testing and smart contract audits with remediation tracked to closure

• Security of wallet infrastructure cryptographic key management and custody arrangements for client crypto-assets

• Identity and access management: authentication privileged access and least-privilege controls across every system.

• Security by design in product development infrastructure changes and integrations with platforms payment providers and other third parties.

• Third-party security risk assessment

Education Skills & Experience

• University Degree in IT / Infosys Security or equivalent thereof

• 8 years in information security

• 3 years as a leader of Infosys / IT security within fintech payments crypto or iGaming

• Deep hands-on experience with cloud security network security and security operations

• Practical knowledge of wallet security key management (HSMs MPC or multisig) and custody of digital assets.

• Solid track record of building incident response capability and leading real incidents through to recovery

• Familiarity & certifications with frameworks such as ISO 27001 NIST CSF or SOC 2 and with the ICT risk requirements of DORA

• The judgement to prioritise real risk over checklists and to explain it clearly to engineers and the Board alike

• Background in offensive security red teaming or threat intelligence.

• Certifications such as CISSP CISM OSCP or equivalent

About this role

• Based in Ta Xbiex Malta (hybrid)

• Salary around 90-100K benefits

Please apply with your detailed CV in English

*JobMatchingPartner Limited is a recruitment agency licenced in Malta EU with licence no EA00340-2024. We act on behalf of clients based in Malta and elsewhere. JobMatchingPartner does not share your personal details with any third party without your written consent.