XM

Global forex and CFD broker

Information Security Officer

Security Governance, Risk & ComplianceUpdated on Nov 13

Full-timeHybrid

About the Job

Requirements

A BSc or MSc in Information Security or another related field.
At least 1–2 years of experience in information security or a similar role.
Experience in Information Security Governance and demonstrated ability to develop policies and procedures.
Skills across information security areas including operations, physical, network, system, and application security.
Knowledge and understanding of common security frameworks and standards, such as ISO 27001, NIST CSF, and NIST 800-53.
Familiarity with the European General Data Protection Regulation (GDPR) and Digital Operational Resilience Act (DORA) Regulation.
Strong interpersonal, organizational, and teamwork skills.
Excellent written and oral communication skills in both English and Greek.
Ability to work as part of a team.

Responsibilities

Contribute to implementing and maintaining the organisation's information security program to ensure people and information assets are adequately protected.
Assess and assure the information security of third-party suppliers and ensure compliance with company security standards.
Identify and address security violations and inefficiencies in systems and applications.
Conduct due diligence on third-party service providers' security controls, posture, and products, and ensure compliance with company policies and security posture.
Perform security assessments of third-party software and service providers, such as cloud services and technology vendors, to identify potential risk.
Monitor and seek assurance regarding third-party service providers' compliance to secure information-system supply chains, identify information security risks, and improve security standards and controls.
Work with Legal to ensure third-party contracts and service agreements contain adequate information security provisions to protect information and information-processing services.
Recommend improvements to controls and practices to reduce information security risks.
Initiate and promote activities that foster information security awareness within the company.

Desired Qualifications

CompTIA Security+, ISC2 CC, EC-Council CEH, or a relevant certification in cybersecurity or ICT is an advantage.

The Role:

You will contribute to the implementation and maintenance of the organisation's information security program, to ensure that people and information assets are adequately protected. You will also be responsible for assessing and assuring the information security of third-party suppliers and ensuring compliance with the company’s security standards.

The main responsibilities of the position include:

Identifying and addressing security violations and inefficiencies with systems and applications
Conduct due diligence of third-party service providers’ security controls, posture and products, and ensure compliance with Company policies and security posture
Perform security assessments on third-party software and service provides such as cloud services, technology vendors, or any other services outsources to a 3rd party to identify potential risk
Monitoring and seeking assurance on the level of compliance of third-party service providers to ensure the secure supply chains of information systems, identify any information security risks, and improve their information security standards and controls
Work with Legal to ensure third party contracts and service agreements contain adequate information security contractual provisions to protect information and information processing services
Make recommendations for improving controls and practices to reduce risks related to information security
Initiating and promoting activities to foster information security awareness within the company

Main requirements:

BSc/MSc in Information Security or any other related field
Minimum 1-2 years' experience in information security or a similar role
Experience in Information Security Governance and demonstrated ability to develop policies and procedures
Skilled across various areas of Information Security such as operations, physical, network, system and application security
Possess knowledge and understanding of common security frameworks and standards, such as: ISO27001, NIST CSF, NIST 800-53 etc
CompTIA Security+, ISC2 CC, EC-Council CEH – or a relevant certification in matters of cybersecurity and/or ICT will be considered an advantage
Familiar with the European General Data Protection Regulation (GDPR) and Digital Operational Resilience Act (DORA) Regulation
Strong interpersonal, organizational and team working skills
Excellent written and oral communication skills, in both English and Greek language
Ability to work as part of a team

Benefit from:

Attractive remuneration package plus performance related reward
Private health insurance
Corporate pension fund
Intellectually stimulating work environment
Continuous personal development and international training opportunities

The Hiring Experience: What Awaits You

Let’s Connect – Intro Chat with Talent Acquisition
Deep Dive – First Interview with Your Future Team
Final Connection – Final Interview

All applications will be treated with strict confidentiality!

By submitting this application, I confirm that I have read and agree to the terms of the Privacy and Data Protection Notice and the Confidentiality Undertaking.

About the Company

XM

Global forex and CFD broker

XM is a forex and CFD broker that helps people trade currencies and other financial instruments online. It operates a trading platform where clients can buy and sell currencies and CFDs through account holders in multiple languages. The product works through a global team and offices; clients access markets via XM’s platform and tools, with support and services offered in over 30 languages. XM differentiates itself by its culture and people-focused approach: a large workforce (over 1,700 professionals across seven offices) and an emphasis on its values Big. Fair. Human., with programs for learning, wellbeing, diversity and inclusion, and flexible work arrangements. The company aims to be a leading global fintech provider by delivering reliable service, ongoing development for users and staff, and a strong focus on customer and employee wellbeing.

Company size: 1,001-5,000
Company stage: Not listed
Total funding: Not listed
Headquarters: Limassol Municipality, Cyprus
Founded: 2009

Recently Posted Jobs

Explore more opportunities at XM

See more jobs