Deputy Regional Information Security Officer

The role

You will own ICT security, operational resilience, and regulatory compliance for a portfolio of entities. You will serve as the named security officer accountable to boards and regulators.

What you will do

• Serve as the named ICT security officer for appointed entities
• Prepare and present security, risk, and resilience materials to entity boards
• Act as the primary point of contact for VARA and other regulatory authorities
• Support entity go live processes by implementing and localizing group ICT governance frameworks
• Lead ICT and security risk assessments for appointed entities
• Maintain and adapt entity level policies and procedures
• Coordinate control testing, evidence documentation, and audit preparation
• Manage the classification, escalation, and regulatory reporting of ICT-related incidents
• Lead business impact assessments, critical function mapping, and business continuity planning
• Oversee continuity and recovery testing

Required qualifications

• 7+ years of experience in information security governance, ICT risk management, or regulatory compliance in a regulated financial services, fintech, or virtual asset environment
• Direct experience as a named regulatory contact, involvement in regulatory examinations, supervisory interactions, or licensing processes
• Demonstrated ability to implement, adapt, and maintain compliance or governance frameworks within a regulated environment
• Experience conducting risk assessments, business impact analyses, and resilience planning at the entity level
• Familiarity with ICT outsourcing and third-party risk management within group structures
• Ability to translate technical risk into board-level narrative and regulatory-grade documentation
• Ability to operate across multiple jurisdictions simultaneously
• Strong project management skills

Nice to have

• Experience with VARA or other virtual asset / crypto-native regulatory regimes
• CISSP, CISM, CRISC, CISA, or ISO27001 Lead Implementer certifications
• Familiarity with EU frameworks such as DORA and MiCA

Before you apply

• We may ask candidates to complete job-related skills or work-style assessments

About the company

Payward is the parent company behind Kraken, NinjaTrader, Breakout, xStocks, Payward Services and CF Benchmarks. It has spent 15 years building financial infrastructure platforms to advance an open, global financial system.