Job
- Level
- Lead
- Job Field
- IT, System, Security
- Employment Type
- Full Time
- Contract Type
- Permanent employment
- Location
- Frankfurt (Oder)
- Working Model
- Onsite
Job Summary
In this role, you will develop security strategies and policies, implement ISMS processes in accordance with ISO 27001, and conduct regular security assessments to ensure digital security.
Job Technologies
Your role in the team
- The Chief Information Security Officer will be responsible for establishing the security strategy and direction for BitGo EU.
- As our top information security leader, you will have the opportunity to drive and implement the security strategy at the industry leader in BitGo for securing digital assets.
- Demonstrating your vision, domain expertise, and strong leadership skills, you will help shape the next generation of products and services while upholding the continued trust our clients have placed with us to ensure their assets are secure.
- Working closely with the rest of our engineering teams, you and your team will share responsibilities to ensure that BitGo is able to continue to safely and securely ship highly scalable products as quickly and frictionlessly as feasible.
- You will design and work across teams to implement a program to protect our customer and company information, and secure our IT infrastructure.
- You will champion and preserve a balanced culture of security awareness by supporting and enabling risk analysis and strong security practices throughout the company.
- You will provide leadership in maintaining BitGo's security policies, standards, and practices for the entire company and ensure that BitGo is in compliance with all applicable laws, regulations, and policies regarding the securing of information.
- You will drive implementation of security plans, including incident response, and lead the operational processes for monitoring and maintaining security and relevant compliance.
- Serve as the designated Chief Information Security Officer (CISO) for BitGo Europe GmbH, fulfilling all regulatory obligations under BaFin, DORA, and MiCA requirements.
- Develop, implement, and maintain the information security management system (ISMS) in accordance with ISO 27001 and applicable EU regulatory standards.
- Leiten Sie die Identifikation, Bewertung und Behandlung von ICT- und Informationssicherheitsrisiken in der europäischen Einheit, in Übereinstimmung mit dem ICT-Risikomanagementrahmenwerk von DORA.
- Act as the primary point of contact with BaFin and other EU regulatory bodies on all information security matters, audits, and supervisory inquiries.
- Own and oversee the incident response and ICT-related incident reporting processes, ensuring timely notification to regulators as required under DORA.
- Define and enforce security policies, standards, and controls covering network security, access management, cryptographic asset protection, and operational resilience.
- Conduct and coordinate regular security assessments, penetration tests, vulnerability management, and third-party ICT risk reviews.
- Collaborate with Group-level security and compliance teams to align European security posture with global BitGo standards while meeting local regulatory requirements.
- Provide security awareness training and foster a security-first culture across the Frankfurt office and European operations.
- Report regularly to senior management and the Management Board on the state of information security, open risks, and remediation progress.
This text has been machine translated. Show original
Our expectations of you
Qualifications
- Starkes Verständnis für ICT-Risikomanagement, Drittanbieter-Risiken und Anforderungen an die operative Resilienz gemäß DORA.
- Familiarity with digital asset infrastructure, custody technology, and the unique security considerations of blockchain-based systems is a strong advantage.
- Excellent written and verbal communication skills in both English and German; ability to produce regulatory-quality documentation and board-level reporting.
- Demonstrated ability to build and lead cross-functional security initiatives in a fast-paced, international organization.
- Strong analytical and risk-based thinking; able to balance regulatory compliance with pragmatic, business-enabling security design.
- Based in or willing to relocate to Frankfurt; this is an on-site role with limited home-office agreement possible.
Experience
- 6 to 10 years of experience in information security, with at least 3 years in a senior or lead CISO role within a regulated financial services or fintech environment.
- Deep knowledge of BaFin regulatory requirements, DORA (Digital Operational Resilience Act), and MiCA, with hands-on experience implementing controls to meet these frameworks.
- Proven experience managing or operating under ISO 27001-certified ISMS; CISM, CISSP, or equivalent certification strongly preferred.
- Experience interfacing directly with financial regulators (BaFin or equivalent EU national competent authority) on security matters.
This text has been machine translated. Show original
What we offer
- Competitive base salary, bonus and stock options.
- Access to global, group-wide experts in the crypto industry.
- Free custom lunches, dinners and snacks.
- Computer equipment and workplace furniture to suit your needs.
- Great colleagues and inspiring environment.
This text has been machine translated. Show original
Topics that you deal with on the job
Job Locations
This is your employer
BitGo
BitGo, Inc. is a renowned provider of digital asset solutions based in Palo Alto, USA. Founded in 2013, the company specializes in providing custody, wallet, and staking services for institutional clients. With over 1,500 clients worldwide, BitGo is a leading player in digital asset management and secures a significant share of all Bitcoin transactions.
Description
- Company Type
- Established Company
- Working Model
- Onsite
- Industry
- Banking, Finance, Insurance
Chief Information Security Officer
- Location
- Frankfurt (Oder)
- Working Model
- Onsite
- Diversity
- Open for all genders
