Head of Information Security - CISO

About Revolut

People deserve more from their money. More visibility, more control, and more freedom. Since 2015, Revolut has been on a mission to deliver just that. Our powerhouse of products — including spending, saving, investing, exchanging, travelling, and more — help our 50+ million customers get more from their money every day.

As we continue our lightning-fast growth,‌ 2 things are essential to our success: our people and our culture. In recognition of our outstanding employee experience, we've been certified as a Great Place to Work™. So far, we have 10,000+ people working around the world, from our offices and remotely, to help us achieve our mission. And we're looking for more brilliant people. People who love building great products, redefining success, and turning the complexity of a chaotic world into the simplicity of a beautiful solution.

About the role

Our Technology team isn’t just one of the best in the industry. It's one of the best in the world. And we’re proud of it. It’s our driving force — our engine.

From building a new financial backend to creating an innovative app, there’s nothing they can’t do. Our Technology team isn’t here to fix legacy systems — it’s here to build world-class financial features from the ground up that'll be used by millions of people around the world.

We’re building one of the best Information Security teams to make Revolut the safest place to keep your money. That’s where you come in. We're looking for a highly technical and detail-oriented Head of Information Security to ensure best practices in our IT and Information Security function. An experienced professional with solid technical knowledge and an absolute love for security technologies.

Up for the challenge? Let's get in touch.

What you’ll be doing

• Overseeing information security at Revolut Bank SA (Mexico)
• Collaborating with the global Information Security team, working towards the maturity, automation, and scalability of infosec and IT operations controls
• Developing and delivering strategies, methodologies, communications, and training plans to raise infosec awareness, in line with applicable regulations
• Developing, implementing, and executing the operational and tactical goals to meet strategic KPIs
• Ensuring the performance and availability of the function is sufficient to deliver all technical services
• Developing solid working relationships with regulators regarding Revolut’s IT/InfoSec policies
• Overseeing activities outsourced to group companies to ensure compliance against applicable regulations
• Conducting and completing third-party security risk assessments and reviews
• Coordinating internal and external compliance reviews, providing expertise for regulator and compliance frameworks, such as PCI-DSS, PSD2, and 27001
• Conducting annual reviews on currently onboarded vendors
• Reporting security status and events to senior management

What you'll need

• Senior experience in infosec and IT operations
• Advanced experience in technical security disciplines and information security requirements within technology
• Experience managing intra-group outsourcing of IT and infosec services
• A track record in delivering localised group IT/infosec policies and procedures to meet regulatory requirements
• An excellent understanding of compliance requirements, including those related to the financial services industry
• Knowledge of PCI-DSS, PSD2, GDPR, and other compliance and regulatory frameworks
• An understanding of the technology stack

Building a global financial super app isn’t enough. Our Revoluters are a priority, and that’s why in 2021 we launched our inaugural D&I Framework, designed to help us thrive and grow everyday. We're not just doing this because it's the right thing to do. We’re doing it because we know that seeking out diverse talent and creating an inclusive workplace is the way to create exceptional, innovative products and services for our customers. That’s why we encourage applications from people with diverse backgrounds and experiences to join this multicultural, hard-working team.

Refer to our Data Privacy Statement for Candidates for details on our data handling practices during your application.