Deputy Regional Information Security Officer

About the Role

Join our team as a Senior Analyst supporting regional information security, operational resilience, and business continuity. This role is crucial for ensuring compliance with European regulations like DORA and MiCA and enhancing regional security governance.

Responsibilities

• Prepare, contribute to, and report to regional risk governance and board committee meetings.
• Conduct and document security risk assessments for regional operations and third parties.
• Execute and maintain Business Impact Assessments (BIA) and integrate outputs into global resilience planning.
• Support Business Continuity Plan (BCP) maintenance and testing.
• Collaborate with Group Security and IT teams to map regional requirements into global policies and control frameworks.
• Contribute to the development and refinement of security standards in alignment with ISO27001 and SOC2.
• Participate in drafting and reviewing MiCA- and DORA-aligned security policies and documentation.
• Support periodic security control testing and evidence collection for internal and external audit cycles.
• Track and follow up on audit findings and control remediation activities.
• Maintain compliance evidence libraries for key regulatory domains (e.g., MiCA, DORA, ISO, SOC).
• Oversee third-party risk assessments, including intragroup ICT outsourcing and vendor resilience.
• Assist in compiling responses to regulatory audits, due diligence questionnaires, and license maintenance.

Requirements

• Proven capability in executing security and resilience functions.
• Experience or familiarity with European regulatory requirements such as DORA and MiCA.
• Knowledge of security standards like ISO27001 and SOC2.
• Strong analytical skills for risk assessments, BIAs, and control validation.
• Ability to work collaboratively with various teams and stakeholders.