About Fintech Farm We are a UK fintech creating successful neobanks in emerging markets in partnerships with local traditional banks. Our success builds upon a best-in-class product, customer experience, emotional engagement, viral marketing and deep credit decisioning expertise. One of our founders had previously co-founded a highly successful Eastern European neobank with a multi million customer base. We launched our first market with Leobank in Azerbaijan in 2021, where we have already established market leading positions. Our next market was Vietnam, where we launched Liobank in early 2023 and also gained solid traction. We have a few more new markets in the pipeline for the next 12 months, and we are starting to build the team there.
Why Fintech Farm is a great place to be Our ambition. We are looking to become a leading consumer digital bank brand in each market we operate making it easy for consumers to interact with their money. You could be a part of this exciting journey.
Our culture. Customers. We always go above and beyond to provide an amazing customer experience. We serve our customers the way we would want our mom to be served. And who said that banking has to be boring? We make our apps not just easy but fun to use. People. We are all business partners in our company. Each of us thinks big, acts as if we own the place, and never takes “No” as an answer. We work with strong individuals whom we empower and trust rather than micromanage. Common sense rather than formal policies prevails in all that we do. We always stay curious and open-minded. We embrace the We over Me culture.
The Role: The Information Security Officer is a senior-level role responsible for developing, implementing, and maintaining a comprehensive information security strategy to protect digital banking assets, operations, and customer data. This includes integrated security architectures, compliance with global standards (PCI DSS, ISO/IEC 27001), and proactive risk management across all digital services and infrastructure.
Key Responsibilities: * Security Strategy & Governance * Develop, lead, and continually refine the digital bank security program in line with business goals. * Define security policies and controls aligned with ISO/IEC 27000 standards family and PCI DSS and local market regulatory requirements. * Coordinate with executive leadership to embed security into enterprise risk management. * Integrated Security Solutions * Architect and implement end-to-end security solutions across cloud (AWS), on-prem, and hybrid environments. * Integrate SIEM, DLP, PAM, DAM, IAM, WAF, secure SDLC pipelines. * Manage relationships with security vendors, and platform providers. * Risk Management & Compliance * Lead risk assessments and mitigation planning across technology and operational areas. * Own PCI DSS and ISO/IEC certification programs, audits, and remediation efforts. * Ensure compliance with GDPR, DPSC, other local data protection regulations where applicable. * Incident Response & Business Continuity * Maintain and exercise incident response and disaster recovery plans. * Oversee forensic investigations, breach containment, reporting, and root-cause analysis. * Training & Awareness * Cultivate a culture of security across the organization. * Design and deliver security awareness and phishing simulation programs.
Required Skills & Qualifications: * Education & Certifications: * Bachelor’s or Master’s degree in Cybersecurity, Computer Science, or a related field. * Certifications: CISM, CISA, ISO 27001 Lead Implementer/Auditor, PCI DSS ISA/QSA (preferred). * Experience: * Minimum 6–8 years in Information Security, with 3+ years in a leadership role in banking or fintech. * Proven experience implementing PCI DSS, ISO/IEC 27001, and managing certification cycles. * Experience in managing integrated security platforms and tooling. * Familiarity with Open Banking APIs and PSD2 security requirements. * Technical: * Deep understanding of cryptography, secure architecture design, data tokenization, and anonymization. * Strong knowledge of DevSecOps, secure coding practices, and CI/CD pipelines. * Fluency in threat modelling and AI tools usage.
Preferred: * Experience with container security (Kubernetes, Docker) and cloud-native tools (e.g., AWS Security Hub). * Experience in SOC design/operation and regulatory. * Knowledge of fraud prevention systems and transaction monitoring.
