International Fintech & Payments Company

📍 Limassol, Cyprus|

We are looking for a** hands-on CISO to lead cybersecurity across the Group’s fintech products**, technology platforms, corporate environment, and AI initiatives.

This is not a compliance-only role. We are looking for a security leader who combines strong technical expertise with a product mindset and can embed security across architecture, SDLC, infrastructure, engineering, and operations.

🔑** Key Responsibilities**

• Develop and execute the Group’s cybersecurity strategy, roadmap, budget & security operating model • Build and lead teams across Product Security, Security Engineering, SOC, Incident Response & GRC • Own the Secure SDLC, including threat modelling, architecture reviews, security testing and vulnerability management • Embed SAST, DAST, SCA, API, container & IaC security into engineering workflows • Strengthen software supply-chain security, SBOMs, dependency governance and artifact integrity • Secure payment, merchant, onboarding, transaction-processing and settlement workflows • Establish security standards for APIs, authentication, authorization, privileged access and sensitive data • Lead security governance for Generative AI, AI-assisted development and agentic systems • Establish SOC monitoring, detection engineering, incident response and security exercises • Lead PCI DSS Level 1, ISO 27001, GDPR, SOC 2, NIS2, DORA and related security requirements • Oversee penetration testing, audits, third-party assessments and remediation • Define security standards across Cloud, Kubernetes, CI/CD, IaC, networks, endpoints and SaaS • Advise executive management and independently escalate unacceptable security risks

🎯 Requirements

• 10+ years in cybersecurity, technology risk, engineering or related fields • 5+ years in senior security leadership • Strong background in Fintech, Payments, Banking, EMI, Acquiring or regulated financial services • Deep expertise in Application Security, DevSecOps, API Security & Secure SDLC • Strong knowledge of Cloud, Kubernetes, Microservices, CI/CD & Infrastructure as Code • Experience with SOC, SIEM, Incident Response, Detection Engineering & Vulnerability Management • Strong GRC background, including PCI DSS, ISO 27001, risk management & audits • Practical understanding of AI security, GenAI risks, agentic systems & AI governance • Experience building security teams and managing budgets, vendors and MSSPs • Strong product mindset and ability to balance security, compliance, customer experience and delivery speed • B2