Information Security Officer

TV Development GmbH · Warsaw, Poland

No Polish requiredPosted yesterday

Apply for this job

You apply off-site, with the employer or the job board. I never handle applications.

Warsaw Full-time Permanent employee

Your role

Take ownership of our information security strategy and help protect what matters most: our data, our systems, and the trust our clients place in us. In this role, you'll ensure all Group companies meet the highest security standards and stay resilient against emerging threats.Your mission and responsibilities

Continuous coordination of information security objectives with the strategic objectives of the Tradevest Group.
Work directly with the management advising them on information security issues and provide regular reports on the status of information security.
Establishment, operation and further development of our information management system (ISMS) based on the GRC software we use.
Creating and updating security guidelines and procedures in accordance with current standards and legal requirements (MaRisk, DORA etc.) arising from the different regulatory jurisdictions we operate in, such as Germany and Poland.
Creation, coordination and implementation of audit procedures based on a multi-year audit plan.
Coordination and follow-up of measures to address risks and prevent information security incidents..
Recording and coordinating the handling of information security incidents as well as the corresponding analysis and follow-up of incidents.
Coordinating the ongoing and on-demand performance of information risk analyses and related activities in close cooperation with process, information and risk owners.
Supporting the implementation and documentation of emergency tests and updating the emergency manual in close cooperation with the process, information and risk owners.
Coordination of target group-oriented awareness-raising and training measures on the topic of information security. Your qualifications and experience

At least three years of practical experience in the role of information security officer or in a comparable position in the field of information security in a fast-growing company.
Certifications such as CISA, CISM, or ISO 27001 Lead Auditor are highly preferred.
Very good knowledge of legal and regulatory requirements such as DORA (Digital Operational Resilience Act), NIS2 etc.
Strong business acumen combined with an intuition for proactive collaboration with stakeholders across the company and group entities.
Experience in implementing security strategies, policies, procedures, and standards.
Extensive knowledge of current and emerging cyber security technologies, document management and security operations. Contract

B2BLocation

Warsaw About us

Tradevest is a leading FinTech company offering an innovative platform for securities and cryptocurrency trading, specifically tailored for institutional clients. In Germany, Tradevest holds BaFin licenses as a securities institution, ensuring full regulatory compliance. With our cutting-edge development hub located in Warsaw, Tradevest Polska Sp. z o.o. we drive the technical innovation behind our products. Additionally, through our brand WAWEX, we operate a state-of-the-art cryptocurrency exchange, providing a seamless and secure trading experience. Our mission is to empower institutional traders with advanced tools and technologies that redefine the trading landscape.

WAWEX is a cutting-edge fintech platform at the forefront of the digital finance revolution. Empowering financial institutions, brokers, and banks, WAWEX delivers seamless access to over 75 cryptocurrencies, combining state-of-the-art security with unparalleled market depth. Through innovative tokenization and real-time market insights, WAWEX is shaping the future of trading. With robust API integrations and 24/7 availability, this dynamic platform is designed for institutions ready to embrace the fast-paced world of digital assets and unlock limitless opportunities in global finance.

Take ownership of our information security strategy and help protect what matters most: our data, our systems, and the trust our clients place in us. In this role, you'll ensure all Group companies meet the highest security standards and stay resilient against emerging threats.Your mission and responsibilities

Continuous coordination of information security objectives with the strategic objectives of the Tradevest Group.

Work directly with the management advising them on information security issues and provide regular reports on the status of information security.

Establishment, operation and further development of our information management system (ISMS) based on the GRC software we use.

Creating and updating security guidelines and procedures in accordance with current standards and legal requirements (MaRisk, DORA etc.) arising from the different regulatory jurisdictions we operate in, such as Germany and Poland.

Creation, coordination and implementation of audit procedures based on a multi-year audit plan.

Coordination and follow-up of measures to address risks and prevent information security incidents..

Recording and coordinating the handling of information security incidents as well as the corresponding analysis and follow-up of incidents.

Coordinating the ongoing and on-demand performance of information risk analyses and related activities in close cooperation with process, information and risk owners.

Supporting the implementation and documentation of emergency tests and updating the emergency manual in close cooperation with the process, information and risk owners.

Coordination of target group-oriented awareness-raising and training measures on the topic of information security. Your qualifications and experience

At least three years of practical experience in the role of information security officer or in a comparable position in the field of information security in a fast-growing company.

Certifications such as CISA, CISM, or ISO 27001 Lead Auditor are highly preferred.

Very good knowledge of legal and regulatory requirements such as DORA (Digital Operational Resilience Act), NIS2 etc.

Strong business acumen combined with an intuition for proactive collaboration with stakeholders across the company and group entities.

Experience in implementing security strategies, policies, procedures, and standards.

Extensive knowledge of current and emerging cyber security technologies, document management and security operations. Contract

Warsaw About us