Senior Information Security Officer

Summary

Join CoinsPaid, a leading crypto payment gateway, and contribute to building a world-class crypto payment ecosystem. As an Information Security Officer, you will participate in external audits (ISO27001, DORA), manage information security risks, and improve processes for compliance. You will also create and maintain ISMS metrics, participate in asset management, and process tickets related to vendor onboarding and security. The company offers a remote-first work environment with employees in 30+ countries and has received numerous awards. CoinsPaid is a rapidly growing, profitable company with a strong team spirit and commitment to employee development.

Requirements

• Technological education
• Analytical thinking, ability making business conclusions from technical details
• Technical background, understanding cloud technologies (Saas, PaaS, IaaS), basic AWS knowledge, basic understanding of microservice architecture principles, CI/CD and SDLC understanding
• Experience in building information security processes
• Understanding risk-oriented approach
• At least one implemented ISO27001 project from a scratch
• Ability to speak with non-technical colleagues, ability to transform technical risks to business risks and vice versa
• Good communication skills
• Good level of spoken and written English and Russian

Responsibilities

• Participate in external audits: ISO27001, DORA
• Communicate with auditors in terms of explaining process evidence for ISO27001/DORA compliance
• Create and periodically update information security risk management approach considering best practices ISO27005, NIST etc
• Follow up the information security risk management process across the company
• ISMS metrics creation/updating/collecting and communication
• Participate in assets management process creation
• Improve and update processes needed for compliance with ISO27001 and DORA
• Tickets processing related to vendor onboarding process, new software approval, security due diligence, vulnerability management and other ISO27001/DORA related processes

Preferred Qualifications

• Actual professional certificates CISSP, CISM, ISO27001 LI/LA
• Work experience in financial institutions or crypto processing