Chief Information Security Manager

Final is a world leader in trading algorithms and trade execution technologies development. Our multi-disciplinary teams have developed a unique and highly successful machine learning algorithmic based HFT platform that delivers excellent results. In a world increasingly dominated by learning machines and artificial intelligence, we at Final are especially proud of our humans. Our elite team of exceptional people are the soul of our company, and it is our top priority to provide them with a professionally fulfilling environment that supports healthy work-life balance. Our employees are encouraged to pursue their passions outside of work and we are proud to offer them a variety of opportunities, multiple resources and an agile work environment which promotes their well-being.

We are looking for an experienced CISO to lead the company’s security vision and build a comprehensive cybersecurity strategy & roadmap-plan to protect Final’s IP. In this role you will leverage your passion for security while defining the policies and work with cyber security team to execute the security roadmap of the company and build KPIs to reflect the company’s security status and progress.

RESPONSABILITIES

• Build and maintain an Information Security roadmap and effectively communicate the strategy to C-level management and company’s board.
• Design and maintain processes, policies and guidelines to enforce security compliance.
• Conduct risk assessment on systems, processes, vendors and manage the compliance process.
• Ensure that security plans are implemented and carried out, including- privileges access reviews, penetration tests, etc.
• Participate in all security architecture design processes of our networks and services, ensuring the highest level of protection against cyber threats.
• Promote incident response culture and efforts, including coordinating with security team and Final’s internal and external parties, to mitigate security incidents promptly.
• Lead a security awareness and training culture among employees and stakeholders
• Evaluate and manage the security posture of third-party vendors and partners, ensuring they meet our security standards.
• Perform design reviews and architecture assurance to identify and mitigate possible security risks.
• Identify new promising cyber security technologies.

REQUIRMENTS

• 8+ years of experience as CISO or equivalent position in a technological company while driving change with passion
• Deep knowledge in designing secured architectures for both on-premise and public cloud environments.
• Hands-on experience in designing, implementing, and leading security and risk management programs
• Significant experience in hardening and protecting Cloud infrastructures and services including IaaS, PaaS and SaaS.
• Experienced with Designing Cyber Security solutions for Virtualized and Container based Infrastructures, Both on-prem and in the Cloud.
• In-depth understanding of SSDLC and SECDEVOPS processes.
• Strong knowledge of current and emerging cybersecurity risks (on-premise and cloud) and modern risk management methods and solutions
• Good familiarity with IaC Provisioning and Zero-Trust Approach.
• Strategic Thinker: Ability to develop and execute a long-term cybersecurity strategy aligned with business objectives
• In depth technical knowledge of operating systems, networking and cloud infrastructure
• Experience with compliance plans and threat assessment
• Professional security certification (e.g. CISSP, CISM or equivalent)
• Experience in Managing, Investigation and Recovery from 2-3 Major Cyber Events.
• Pragmatic, Out of the Box Thinker with Personality to leverage Cyber Defense for business growth not Just Out of Context Cyber Enforcer.
• Continuously seek opportunities to work smarter by collaborating with all stakeholders