Information Security Officer

About the role

The Information Security Officer leads the security function across all BALFIN Group companies, ensuring the ISMS aligns with ISO/IEC 27001 and that security is embedded in business strategy and digital transformation.

Key responsibilities

• Design and implement the Group's security strategy and lead the Information Security team.
• Govern information security in line with ISO/IEC 27001 and NIST, develop policies, procedures and standards.
• Conduct security risk assessments, Business Impact Analyses and supplier risk evaluations.
• Oversee security operations and protective technologies such as SIEM, EDR, email and network security.
• Manage critical security incidents and contribute to business continuity and disaster recovery plans.
• Integrate "Security by Design" into digital transformation projects and new systems.
• Run information security awareness and training programmes.
• Report regularly to the Information Security Committee and executive management on risks, projects and maturity.

Required profile

• University degree (Master's preferred) in Computer Science, Cybersecurity or related field.
• At least 5 years of information security experience, including 2 years in a leadership role.
• Proven experience building and governing an ISMS according to ISO/IEC 27001.
• Strong organizational, planning and communication skills.
• Fluent English (written and spoken).

Required skills

• Security technologies: SIEM, EDR/XDR, email security, firewalls, IDS/IPS, network segmentation.
• Identity and Access Management (IAM/PAM), cloud security, vulnerability management.
• Professional certifications: CISSP, CISM, ISO/IEC 27001 Lead Implementer/Auditor, CRISC, CISA, CEH, OSCP (optional).

What we offer

• Attractive benefit package with performance‑based remuneration.
• Opportunities for professional growth within the BALFIN Group.
• Recognition, rewards and flexible working hours.