CISO

This is your chance to bring real-time value to a Fintech startup aiming large!
As CISO you will be responsible for keeping the company's products and data secure.
The company processes player payments, holds liquidity, and run smart contracts (BCT) that move real value, which potentially makes them a target.
Reporting to the CTO and the BoD, You will ensure resilience to cyber attacks and ICT disruptions, and that the confidentiality, integrity, and availability of IT systems and client data is beyond reproach.
This is a hands-on security leadership role where your focus is on defending the company.
This is a Malta-based role, not available on a remote basis. Salary idea €90-100K + benefits.
Role & Responsibilities

• Own information security strategy
• Build policies and procedures to industry best practice
• Threat detection, incident response, and escalation: building the playbooks, running the drills, and leading the response when something happens
• Cybersecurity controls and security monitoring across our services, networks, cloud infrastructure, and smart contracts
• Regular security risk assessments, vulnerability management, penetration testing, and smart contract audits, with remediation tracked to closure
• Security of wallet infrastructure, cryptographic key management, and custody arrangements for client crypto-assets
• Identity and access management: authentication, privileged access, and least-privilege controls across every system.
• Security by design in product development, infrastructure changes, and integrations with platforms, payment providers, and other third parties.
• Third-party security risk assessment

Education, Skills & Experience

• University Degree in IT / Infosys Security or equivalent thereof
• 8+ years in information security
• 3+ years as a leader of Infosys / IT security within fintech, payments, crypto, or iGaming
• Deep, hands-on experience with cloud security, network security and security operations
• Practical knowledge of wallet security, key management (HSMs, MPC, or multisig), and custody of digital assets.
• Solid track record of building incident response capability and leading real incidents through to recovery
• Familiarity & certifications with frameworks such as ISO 27001, NIST CSF, or SOC 2 and with the ICT risk requirements of DORA
• The judgement to prioritise real risk over checklists, and to explain it clearly to engineers and the Board alike
• Background in offensive security, red teaming, or threat intelligence.
• Certifications such as CISSP, CISM, OSCP, or equivalent

About this role

• Based in Ta 'Xbiex, Malta (hybrid)
• Salary around €90-100K + benefits

Please, apply with your detailed CV in English
*JobMatchingPartner Limited is a recruitment agency licenced in Malta, EU with licence no EA00340-2024. We act on behalf of clients based in Malta and elsewhere. JobMatchingPartner does not share your personal details with any third party without your written consent.