Information Security Officer

finleap connect is the leading independent Open Banking platform provider in Europe It enables companies across a multitude of industries to provide the next generation of financial services by understanding how customers transact and interact. We offer a full range of leading fintech solutions to financial institutions. We cater to clients requirements, from stand-alone microproducts to all-in-one solutions. We ensure that all levels of digital maturity are covered by our services.

finleap connect addresses the fragmented open banking landscape with a “full-stack” platform. It enables partners to access financial transactions, enrich the transactions with data & analytics tools, and ultimately deliver seamless digitized financial services to customers. finleap connect has the unique ability to tap into category leaders founded in the finleap ecosystem, including Solarisbank, ELEMENT and Elinvar, driving additional value to partners. The company is a regulated payment institution under the Payment Services Supervision Act (Zahlungsdiensteaufsichtsgesetz - ZAG)

Challenge yourself and join us in our purpose to empower everyone to have access to fair and transparent financial services

**About the position**:

- Department: G&R
- Team: Information Security
- Locations: Berlin/Hamburg
- Remote status: Hybrid
- Number of positions: 1

We are looking for an ambitious Information Security Manager who is willing to own Information Security and Business Continuity Management as Information Security Officer at finleap connect. You will be working directly with our CFO and our Governance & Risk team, implementing policies and procedures, identifying and assessing risks and working with teams and management across the company to improve Security and Business Continuity. The role offers a very broad impact, with visibility throughout the organization and a significant opportunity to take ownership.

You will evolve our Security & Business resilience to deliver great customer value on platforms that are reliable, secure and compliant. Our cross-functional teams are all about working with autonomy, collaboration and sharing knowledge As an Information Security Officer at finleap connect, you will be encouraged to embrace and get to know more about the business and the innovations in the field of technology and the fintech scenario.

We have offices in Berlin, Hamburg and Madrid, due to the nature of this role, it is a hybrid position with semi-regular in-person events and meetings. If you are not currently close to one of our offices, we’re happy to support your relocation.

Tasks

**Your role and goals**:
As a Information Security Officer you will lead Information Security & Business Continuity Management:

- Primary contact person for all related questions or requests from both colleagues and externals i.e. customers, auditors, and the Supervisory Authority etc.
- Identify and drive achievement of strategic goals for InfoSec/BCM
- Instruct process owners on appropriate 1st level controls to minimize risks
- Conduct 2nd Level controls or testing to minimize or monitor risks
- Define, maintain & update codes, strategies, policies and procedures
- Advise Chief Finance Officer and Management on risks & control matters including regular reporting
- Lead training and awareness for all staff
- Lead incident management
- Complete the annual Risk Assessment regarding InfoSec/BCM matters
- Cooperate with and support the 3rd Line of Defence to complete annual audits
- Review of customer and vendor contract security clauses and requirements
- Collaborate with Data Privacy Officer in protection of personal data
- Support the strategic planning of solutions for the company and its customers, researching and reviewing recognised best practice and upcoming changes to technology.

**Requirements**:
What does success look like in this role?
- At least 3-5 years experience working with IT or Information Security
- Organized and structured in your work, outputs and communication
- Bias for action and pragmatic solutions
- Strong stakeholder management skills and ability to work collaboratively with them
- Ability to coordinate and handle tasks with an eye for prioritization
- Ability to communicate issues at both technical and management level, adapting message to target group
- Fluent in German and English language skill, both verbal and written, is a must.

**What you bring to the team**:

- Experience in fintechs, financial services industry or Open Banking players
- Knowledge of information security requirements & standards like ISO 27001, SOC, NIST, ZAIT
- Experience of Agile, DevOps and cloud technologies
- IT compliance or IT audit education or experience
- CISSP, CSSP, CISM, or other Information Security risk certifications
- Degree in Computer Engineering, Computer Science or a related field
- Experience of IT security products or services.

**Benefits**:
Why finleap connect?
- Work with a true open banking pioneer and