Ciso Jobs in Malta

About The CompanyCalamatta Cuschieri Moneybase plc is a privately held Fintech Group that operates in Investment Services, Fund Administration, Online Investing, and Payments. With roots dating back to 1971, the Group today is evolving at a fast pace whilst keeping the same core principles, that of providing clients the best service using the latest technology and the top professionals in their field, whilst ensuring the strong governance and ethics.We are committed to attracting and selecting the very best people to join our team and to creating a workplace that promotes individual career growth; we value our people and their well-being. The group employs over 210 people from over 27 countries around the world with Assets Under Management and Administration of over 3 billion.About The RoleThe Chief Information Security Officer (CISO) is responsible for leading the Group’s information security, cyber risk, and resilience strategy across the organisation. Reporting to the CEO, the CISO will provide strategic direction and executive oversight on all matters relating to cybersecurity, security governance, operational resilience, and technology risk.This role is central to ensuring that the organisation’s systems, data, and infrastructure are protected through a strong and proportionate security framework that supports business growth, regulatory compliance, and operational stability.The CISO will work closely with the CTO and technology teams to embed security by design, strengthen cyber resilience, and maintain a high standard of security across the Group.The successful candidate will combine strategic leadership with strong technical knowledge and a sound understanding of security standards, and will play a key role in shaping a security-conscious culture while overseeing security operations, risk management, incident response, and infrastructure security.Duties & ResponsibilitiesStrategy, Leadership & Executive OversightDefine, lead, and continuously enhance the organisation’s cybersecurity and resilience strategy, aligned to business objectivesDevelop and maintain the cybersecurity roadmap and manage the budgetAct as executive owner of cyber risk forming part of the IT steering committeeManage cybersecurity and infrastructure programme delivery, resources, and prioritiesGovernance, Risk & ComplianceEstablish and maintain the organisation’s security governance framework aligned to DORA, PCI-DSS, and recognised security standards including ISO27001, NIST, and CISDefine and implement, with the support of the GRC team, an ICT and information security risk frameworkan enterprise risk management framework and risk appetite, and oversee the identification, assessment, and management of information security and ICT risks across the organisationOversee third-party and vendor risk management programmes, including DORA ICT third-party risk requirementsDefine, review, communicate, and enforce security policies, standards, and proceduresOversee change management from a security perspectiveSecurity Operations & Incident ManagementEstablish and oversee security operations, including SOC, SIEM, and enterprise security monitoringLead incident detection, response, recovery, and reporting capabilitiesAct as executive lead during any cybersecurity incidentsOversee incident investigations, root cause analysis, remediation activities, and cyber incident response plans to protect IT assets, data, intellectual property, and company reputationContinuously improve threat intelligence, detection, and response processesSecurity Architecture, Infrastructure & Technical ControlsConduct a thorough review of the current IT infrastructure and security posture, and embed security-by-design across all business and technology initiativesDefine and oversee enterprise security architecture across cloud, infrastructure, applications, and dataTake ownership of all security-related systems and controls, including identity and access management (IAM)Implement and maintain CIS Critical Security ControlsDefine the CIS Controls baseline and assure its implementation by technology teamsDrive the adoption of modern security practices and technologies, including Zero Trust, EDR, cloud security, and emerging threat intelligence capabilitiesResilience, Disaster Recovery & Business ContinuityOwn the resilience framework and test programme, and assure DR readiness Ensure disaster recovery (DR) and business continuity (BCP) plans are implemented, maintained, and tested in line with DORA resilience requirementsAlign cybersecurity with the enterprise resilience strategy and ensure preparedness for major disruption scenariosSecurity Culture & AwarenessLead organisation-wide security awareness and training programmesPromote and embed a strong security culture across the organisationTeam Leadership & Cross-Functional CoordinationLead, manage, mentor, and develop the Systems and Security teams, overseeing staffing, performance management, and capability developmentBuild and maintain a high-performing cybersecurity and infrastructure function with clear roles, responsibilities, and accountabilityCoordinate employees, contractors, and vendors, and cross-functional initiatives involved in security initiatives IT security and infrastructure operationsAssurance, Metrics & Continuous ImprovementConduct periodic security audits and assessmentsTrack and report security KPIs, risk metrics, and resilience maturity indicatorsMaintain a current understanding of the evolving cyber threat and regulatory landscapeProvide independent challenge and assurance over technology operationsAgree security SLAs and metrics with the CTO and report performance against themExperience RequirementsProven experience in a senior information security leadership role, ideally as a Chief Information Security Officer, Head of Information Security, or equivalentSignificant experience within financial services, fintech, banking, payments, or another highly regulated environmentStrong track record of developing and implementing cybersecurity strategies, governance frameworks, and security transformation programmesDemonstrated experience in cyber risk management, security operations, incident response, and enterprise security architectureExperience working with recognised frameworks and standards such as ISO27001, NIST, CIS, PCI-DSS, and DORAExperience leading or supporting ISO27001 certification and broader regulatory compliance initiativesStrong understanding of operational resilience, disaster recovery, business continuity, and third-party risk managementExperience overseeing security across cloud environments, infrastructure, applications, identity and access management, and data protection controlsProven experience engaging with executive committees, boards, regulators, auditors, and other senior stakeholdersExperience building, leading and developing high-performing security teams, and influencing technology teams without direct line authority.Experience building, leading, and developing high-performing teams across security and infrastructure functionsSkills & CompetenciesStrong strategic thinking with the ability to align cybersecurity priorities to business goalsStrong leadership and people management skills, with the ability to lead, motivate, and develop teamsExcellent communication and stakeholder management skills, including the ability to influence at executive and board levelSound judgement and decision-making skills, particularly in high-pressure or incident-driven situationsStrong analytical and problem-solving capabilities, with the ability to assess risk and define practical mitigation plansGood understanding of modern security practices and technologies, including cloud security, Zero Trust, EDR, SIEM, SOC, and IAMAbility to balance commercial priorities, operational needs, and regulatory requirementsStrong organisational and programme management skills, with the ability to manage multiple priorities effectivelyHigh level of integrity, accountability, and professionalismQualificationsBachelor’s degree in Information Security, Cybersecurity, Computer Science, Information Technology, or a related fieldRelevant professional certifications such as CISSP, CISM, CRISC, ISO27001 Lead Implementer or Lead Auditor, or equivalentAdditional qualifications would be considered an assetRemunerationWe are committed to attracting and selecting top people to join our team. We are also committed to creating a workplace that encourages individual growth; we value our people and their well-being.What We OfferOngoing internal trainingExternal training opportunitiesStudy LeaveSponsorship schemes for further studiesOpportunities for career growthFree health insuranceGym SubsidyPerformance bonusEmployee referral incentiveVisit our websites - cc.com.mt or moneybase.com for more information about us.All Applications will be acknowledged and treated with maximum confidentiality“The enduring goal of Calamatta Cuschieri Moneybase is that the composition of our workforce should reflect that of the communities in which we work.”By submitting this application, I confirm that all the information given by me in this application for employment and any additional documents attached hereto are true to the best of my knowledge and that I have not wilfully suppressed any material fact. I confirm I have disclosed if applicable any previous employment with Calamatta Cuschieri Moneybase Plc. I accept that if any of the information given by me in this application is in any way false or incorrect, my application may be rejected, any offer of employment may be withdrawn or my employment with Calamatta Cuschieri Moneybase Plc may be terminated summarily or I may be dismissed. By submitting this application, I agree that my personal data will be processed in accordance with Calamatta Cuschieri Moneybase Plc's Candidate Privacy Notice

This is your chance to bring real-time value to a Fintech startup aiming large!As CISO you will be responsible for keeping the company's products and data secure.The company processes player payments, holds liquidity, and run smart contracts (BCT) that move real value, which potentially makes them a target.Reporting to the CTO and the BoD, You will ensure resilience to cyber attacks and ICT disruptions, and that the confidentiality, integrity, and availability of IT systems and client data is beyond reproach.This is a hands-on security leadership role where your focus is on defending the company.This is a Malta-based role, not available on a remote basis. Salary idea €90-100K + benefits.Role & ResponsibilitiesOwn information security strategyBuild policies and procedures to industry best practiceThreat detection, incident response, and escalation: building the playbooks, running the drills, and leading the response when something happensCybersecurity controls and security monitoring across our services, networks, cloud infrastructure, and smart contractsRegular security risk assessments, vulnerability management, penetration testing, and smart contract audits, with remediation tracked to closureSecurity of wallet infrastructure, cryptographic key management, and custody arrangements for client crypto-assetsIdentity and access management: authentication, privileged access, and least-privilege controls across every system.Security by design in product development, infrastructure changes, and integrations with platforms, payment providers, and other third parties.Third-party security risk assessmentEducation, Skills & ExperienceUniversity Degree in IT / Infosys Security or equivalent thereof8+ years in information security3+ years as a leader of Infosys / IT security within fintech, payments, crypto, or iGamingDeep, hands-on experience with cloud security, network security and security operationsPractical knowledge of wallet security, key management (HSMs, MPC, or multisig), and custody of digital assets.Solid track record of building incident response capability and leading real incidents through to recoveryFamiliarity & certifications with frameworks such as ISO 27001, NIST CSF, or SOC 2 and with the ICT risk requirements of DORAThe judgement to prioritise real risk over checklists, and to explain it clearly to engineers and the Board alikeBackground in offensive security, red teaming, or threat intelligence.Certifications such as CISSP, CISM, OSCP, or equivalentAbout this roleBased in Ta 'Xbiex, Malta (hybrid)Salary around €90-100K + benefitsPlease, apply with your detailed CV in EnglishJobMatchingPartner Limited is a recruitment agency licenced in Malta, EU with licence no EA00340-2024. We act on behalf of clients based in Malta and elsewhere. JobMatchingPartner does not share your personal details with any third party without your written consent.Owned and operated by JobMatchingPartner Limited since 2019.Registered office:Centris Business Gateway II, Level 2G,Triq is-Salib Ta' L-Imriehel, Zone 3Central Business DistrictBirkirkara CBD 3020MALTARecruitment Licence EA00340-2024 issued by the D.I.E.R. in MaltaCompany Reg C93587Salary: €90,000-100,000 per year