Job
- Level
- Lead
- Job Feld
- IT, System, Security
- Anstellung
- Vollzeit
- Vertragsart
- Unbefristetes Dienstverhältnis
- Ort
- Frankfurt (Oder)
- Arbeitsmodell
- Onsite
Job Zusammenfassung
In dieser Rolle entwickelst du Sicherheitsstrategien und -richtlinien, implementierst ISMS-Prozesse gemäß ISO 27001 und führst regelmäßige Sicherheitsüberprüfungen durch, um die digitale Sicherheit zu gewährleisten.
Job Technologien
Deine Rolle im Team
- The Chief Information Security Officer will be responsible for establishing the security strategy and direction for BitGo EU.
- As our top information security leader, you will have the opportunity to drive and implement the security strategy at the industry leader in BitGo for securing digital assets.
- Demonstrating your vision, domain expertise, and strong leadership skills, you will help shape the next generation of products and services while upholding the continued trust our clients have placed with us to ensure their assets are secure.
- Working closely with the rest of our engineering teams, you and your team will share responsibilities to ensure that BitGo is able to continue to safely and securely ship highly scalable products as quickly and frictionlessly as feasible.
- You will design and work across teams to implement a program to protect our customer and company information, and secure our IT infrastructure.
- You will champion and preserve a balanced culture of security awareness by supporting and enabling risk analysis and strong security practices throughout the company.
- You will provide leadership in maintaining BitGo's security policies, standards, and practices for the entire company and ensure that BitGo is in compliance with all applicable laws, regulations, and policies regarding the securing of information.
- You will drive implementation of security plans, including incident response, and lead the operational processes for monitoring and maintaining security and relevant compliance.
- Serve as the designated Chief Information Security Officer (CISO) for BitGo Europe GmbH, fulfilling all regulatory obligations under BaFin, DORA, and MiCA requirements.
- Develop, implement, and maintain the information security management system (ISMS) in accordance with ISO 27001 and applicable EU regulatory standards.
- Lead the identification, assessment, and treatment of ICT and information security risks across the European entity, in alignment with DORA's ICT risk management framework.
- Act as the primary point of contact with BaFin and other EU regulatory bodies on all information security matters, audits, and supervisory inquiries.
- Own and oversee the incident response and ICT-related incident reporting processes, ensuring timely notification to regulators as required under DORA.
- Define and enforce security policies, standards, and controls covering network security, access management, cryptographic asset protection, and operational resilience.
- Conduct and coordinate regular security assessments, penetration tests, vulnerability management, and third-party ICT risk reviews.
- Collaborate with Group-level security and compliance teams to align European security posture with global BitGo standards while meeting local regulatory requirements.
- Provide security awareness training and foster a security-first culture across the Frankfurt office and European operations.
- Report regularly to senior management and the Management Board on the state of information security, open risks, and remediation progress.
Unsere Erwartungen an dich
Qualifikationen
- Strong understanding of ICT risk management, third-party risk, and operational resilience requirements as defined under DORA.
- Familiarity with digital asset infrastructure, custody technology, and the unique security considerations of blockchain-based systems is a strong advantage.
- Excellent written and verbal communication skills in both English and German; ability to produce regulatory-quality documentation and board-level reporting.
- Demonstrated ability to build and lead cross-functional security initiatives in a fast-paced, international organization.
- Strong analytical and risk-based thinking; able to balance regulatory compliance with pragmatic, business-enabling security design.
- Based in or willing to relocate to Frankfurt; this is an on-site role with limited home-office agreement possible.
Erfahrung
- 6 to 10 years of experience in information security, with at least 3 years in a senior or lead CISO role within a regulated financial services or fintech environment.
- Deep knowledge of BaFin regulatory requirements, DORA (Digital Operational Resilience Act), and MiCA, with hands-on experience implementing controls to meet these frameworks.
- Proven experience managing or operating under ISO 27001-certified ISMS; CISM, CISSP, or equivalent certification strongly preferred.
- Experience interfacing directly with financial regulators (BaFin or equivalent EU national competent authority) on security matters.
Unser Angebot
- Competitive base salary, bonus and stock options.
- Access to global, group wide experts in the crypto industry.
- Free custom lunches, dinners and snacks.
- Computer equipment and workplace furniture to suit your needs.
- Great colleagues and inspiring environment.
Themen mit denen du dich im Job beschäftigst
Job Standorte
Das ist dein Arbeitgeber
BitGo
BitGo, Inc. ist ein renommierter Anbieter von digitalen Vermögenslösungen mit Hauptsitz in Palo Alto, USA. Gegründet im Jahr 2013, hat sich das Unternehmen auf Verwahrungs-, Wallet- und Staking-Dienste für institutionelle Kunden fokussiert. Mit mehr als 1.500 Kunden weltweit zählt BitGo zu den führenden Unternehmen im Bereich der digitalen Vermögensverwaltung und ist für einen erheblichen Anteil aller Bitcoin-Transaktionen verantwortlich.
Description
- Unternehmenstyp
- Etablierte Firma
- Arbeitsmodell
- Onsite
- Branche
- Banken, Finanz, Versicherung
Chief Information Security Officer
- Ort
- Frankfurt (Oder)
- Arbeitsmodell
- Onsite
- Diversität
- Für alle Personen geeignet (m/w/d)
