We are looking for Chief Information Security Officer (CISO).
Key Responsibilities:
- Define and own the organization’s information and cybersecurity strategy, ensuring alignment with executive objectives, risk appetite, and regulatory obligations.
- Build, lead, and scale distributed security teams across architecture, engineering, security operations, and risk management functions.
- Develop, maintain, and continuously improve the company-wide information security framework, aligned with security standards and best practices similar to ISO 27001, NIST CSF, and PCI DSS, and applicable data protection requirements.
- Manage the company’s cyber risk program, providing regular updates and metrics to the CEO and board.
- Oversee incident response and security crisis management to minimize business impact and ensure operational continuity.
- Embed security-by-design and development security (DevSecOps) practices across product and engineering teams.
- Lead cloud security strategy for hybrid and multi-cloud environments, ensuring compliance and resilience.
- Liaise with regulators, auditors, and external partners, maintaining transparency and compliance with regional licensing and data protection requirements.
- Collaborate cross-functionally with IT, legal, HR, compliance, and finance to manage risks and align cyber governance with corporate objectives.
- Build and maintain a security-first culture through training, awareness, and executive engagement.
- Manage budgets, vendor relationships, and third-party risk programs at enterprise scale.
Minimum Requirements:
- 10+ years of professional experience in technology, including at least 5 years in senior or management roles within information security.
- Proven success managing enterprise security posture and reporting to executive or board-level stakeholders.
- Expertise in infrastructure and development security management.
- General understanding of cybersecurity controls and practices, including enterprise-level technical controls.
- Strong understanding of information and cyber security frameworks and standards (ISO 27001, NIST CSF, CIS).
- Experience leading GRC, incident response, and risk management programs.
- Skilled in vendor negotiation and third-party risk oversight.
- Excellent communication and crisis management skills, with the ability to articulate security posture in business terms.
- Confidence in balancing business agility and risk mitigation in fast-evolving environments.
Certifications: CISSP, CCISO, CCSP, CISM, CRISC, ISO 27001 LA/LI, or equivalent information security certifications, or at least 5 years of experience in a senior information or cyber security role.
Nice to Have:
- Familiarity with regulatory frameworks relevant to the iGaming, fintech, or high-compliance digital sectors.
- Experience and background in managing cybersecurity (at least two key domains).
- Strong understanding of cloud infrastructure security (AWS) aspects and secure development practices (DevSecOps, CI/CD).
- Experience managing multi-region operations, including regulatory engagement across jurisdictions.
- Knowledge of advanced analytics and emerging cyber defense technologies.
Contacts: Nadezhda — @NadiaGP_HR