Information Security Manager (Crypto)

Requirements

• Expertise in InfoSec and IT operations within a senior or lead role, particularly within the 2LoD
• Experience with crypto asset service providers or financial institutions handling digital assets
• Advanced proficiency in technical security disciplines and information security requirements tailored to crypto environments
• Experience managing intra-group outsourcing of InfoSec and IT services in regulated settings
• A track record of delivering localised group IT/InfoSec policies and procedures to comply with regulatory standards, including DORA, MICA, and PSD2
• An in-depth understanding of compliance requirements for crypto-asset services and the broader financial sector
• Knowledge of relevant compliance and regulatory frameworks, with a focus on digital operational resilience and crypto-specific regulations
• Relevant information security certifications (CISSP and/or CISM)

What you'll be doing

• Conducting regular ICT security risk assessments and control evaluations, including cybersecurity risks for custodian and self-custody wallets, and responses to wallet attacks
• Reviewing new crypto initiatives, and monitoring crypto service providers
• Monitoring and challenging group-level security controls (AppSec, InfoSec, testing, incident response) to ensure local regulatory compliance
• Overseeing third-party security, outsourcing chains, and crypto service providers
• Reviewing penetration testing, vulnerability scans, and resilience frameworks (BCP, DR, failover)
• Assessing, classifying, and resolving security incidents and threats, including regulatory reporting obligations
• Coordinating audits, inspections, and assurance activities with group and external stakeholders
• Ensuring the adoption of group InfoSec policies locally, while promoting a culture of security throughout the business
• Contributing to digital operational resilience testing (e.g., DORA-aligned exercises) with tech leadership
• Providing regular reporting on security resilience to management and regulators