Information Security Director

Job not on LinkedIn

🕒 July 13

🇪🇸 Spain – Remote

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 38%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

CEX.IO

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2013

₿ Crypto

💸 Finance

💳 Fintech

💰 Seed Round on 2013-01

Crypto • Finance • Fintech

CEX. IO is a comprehensive cryptocurrency platform that allows users to buy, sell, trade, hold, and earn various cryptocurrencies. Since its inception in 2013, CEX. IO has been a leader in the crypto exchange industry, offering innovative solutions like crypto purchases with credit and debit cards and pioneering instant withdrawal services. The platform is designed for both individual users and enterprises, providing a full suite of services including spot and margin trading, a crypto wallet, a trading API, and staking options. CEX. IO is committed to compliance and regulation, maintaining the necessary licenses and adhering to global regulatory standards, providing a secure and reliable environment for over six million users worldwide.

📋 Description

• Serve as the primary local official responsible for CEX.IO Europe S.L.’s digital operational resilience under Regulation (EU) 2022/2554 (DORA) • Maintain local capacity for decision-making, supervision, and questioning over ICT functions delegated to group service providers • Understand, supervise, question, approve, reject, or nullify technical actions, proposals, or recommendations from Group service providers affecting EU operations • Independently manage technology and cyber risks within the Spanish jurisdiction • Ensure operational substance and digital resilience • Act as principal technical liaison and accountable officer for the CNMV and Bank of Spain on cybersecurity, DORA compliance, and DLT-related supervisory matters • Lead implementation and maintenance of the ICT risk management framework to meet CNMV, ESMA, and EBA standards • Supervise and control delegated ICT services, including cloud infrastructure, software development, and security operations • Identify, assess, and mitigate technological risks • Conduct annual reviews of the Business Impact Analysis (BIA) and ICT Risk Assessment • Initiate the Incident Response Plan for high and critical security events • Coordinate notifications of major ICT-related incidents to the CNMV within mandated timelines • Supervise critical third-party ICT service providers and monitor contractual SLAs, RPOs, and RTOs • Oversee crypto-asset custody security, including proprietary infrastructure and external sub-custodians • Ensure integrity of MPC, HSM, and multisig signing workflows • Supervise the Secure Software Development Life Cycle and validate pre-production security testing before deployment • Approve and collaborate on operational resilience testing, threat-led penetration testing, and DLT protocol testing • Maintain a centralized inventory of ICT assets, systems, and network infrastructure supporting Spanish and EU operations

🎯 Requirements

• University degree in Computer Science, Computer Engineering, Cybersecurity, or a related technical field • Relevant industry certifications ideally held, such as CISM, CISSP, CRISC, or CISA • Proven track record in building cybersecurity frameworks • Experience complying with EU financial sector regulations, including DORA, MiCA, and PCI DSS • Knowledge of vulnerability management • Knowledge of threat monitoring tools • Experience with SIEM/SOC platforms, such as Grafana, Kibana, and Elastic • Knowledge of cryptographic protocols • Experience with key ceremony management • Knowledge of secure private key storage • Strong communication skills for interacting directly with financial regulators, including CNMV and Bank of Spain • Ability to lead technical governance under a “hub and spoke” group operational model • Full local tax/legal residency in Spain • Native or bilingual proficiency in Spanish • Professional working proficiency in English