Information Security Officer

About the role

The Information Security Officer leads Ondato’s information security program, shaping strategy, governance and operations to protect data, systems and services while ensuring compliance with relevant laws and standards.

Key responsibilities

• Define, maintain and oversee the company’s information security strategy, ISMS and related policies.
• Direct security operations, lead risk assessments and manage incident response and data‑breach investigations.
• Ensure compliance with ISO/IEC 27001, ISO/IEC 27701, SOC 2, NIST CSF, GDPR, DORA and NIS2.
• Embed secure‑by‑design principles in product development and third‑party services.
• Oversee access, audit and physical controls, as well as business continuity and disaster‑recovery planning.
• Manage supplier security risk, including assessments, monitoring and contract negotiations.

Required profile

• Degree in a security‑ or technology‑related field.
• Minimum 5 years of information security or risk‑management experience, including senior leadership in a service provider or financial institution.
• Strong knowledge of EU regulations (DORA, NIS2) and major security frameworks.
• Proven ability to lead cross‑functional teams and drive security awareness.
• Experience in supplier management and contract negotiations.

Required skills

• Implementation and auditing of ISO/IEC 27001 and ISO/IEC 27701.
• Compliance with SOC 2, NIST Cybersecurity Framework, GDPR, DORA and NIS2.
• Risk assessment, threat modelling and vulnerability management.
• Incident response, evidence collection and breach reporting.
• Access control design, audit logging and security monitoring.
• Business continuity and disaster‑recovery planning.

What we offer

• Monthly gross salary from €4 500 to €7 000 (adjustable by experience).
• Hybrid working model supporting flexibility and work‑life balance.
• Private health insurance.
• One extra paid day off each month.
• Financial support for significant personal life events.
• Company‑wide and team events.