Nethermind is hiring a
Head of Information Security

Summary

Join the executive team as Head of Information Security and establish a security strategy for Nethermind's blockchain infrastructure and Web3 operations.

Requirements

• Bachelor’s or Master’s degree in Computer Science, Information Systems, Cybersecurity, or a related field
• At least ten years of experience in information security and risk management, with a significant focus on blockchain technology, Web3, or the fintech industry
• Strong understanding of blockchain platforms, particularly Ethereum, and knowledge of smart contract security
• Experience with security frameworks and standards such as ISO 27001, SOC2, NIST, and GDPR compliance
• Proven leadership skills with the ability to manage and mentor a diverse and distributed team
• Excellent analytical and problem-solving abilities and strong communication skills to articulate complex security concepts to non-technical stakeholders

Responsibilities

• Develop, implement, and manage the overall enterprise process for security strategy, planning, and governance, explicitly focusing on blockchain and Web3 technologies
• Lead efforts to identify, evaluate, and mitigate security risks, balancing risk management with business goals
• Oversee developing and implementing security policies, standards, guidelines, and procedures tailored to blockchain and decentralised systems
• Ensure compliance with the latest regulatory requirements and best practices in blockchain security and Web3 technologies
• Collaborate with internal teams such as DevOps, legal, and finance to integrate security requirements into daily operations
• Manage security incidents and events to protect corporate IT assets, including intellectual property, regulated data, and the company’s reputation
• Provide leadership to the enterprise’s information security organisation, managing the performance of direct reports and fostering a strong security culture
• Engage with stakeholders to communicate the company's security strategy and how it mitigates risks while supporting business objectives
• Regularly report on the state of the security programme to the CRO and other senior executives

Preferred Qualifications

• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Certified in Risk and Information Systems Control (CRISC)
• Certified Blockchain Security Professional (CBSP)
• Certified Web3 Professional (CW3P)