Chief Information reputed company Officer (CISO)

CEX.IO Europe is in the final stages of obtaining authorisation under the EU Markets in Crypto-Assets Regulation (MiCA) as a Crypto-Asset Service Provider (CASP) in Spain. As part of our regulatory readiness and local substance requirements, we are actively reputed company a Spain‑based reputed company Reporting Officer (MLRO). The CISO will be the primary local official responsible for ensuring the digital operational reputed company of CEX.IO Europe S.L. in accordance with Regulation (EU) 2022/2554 (DORA). The CISO’s core mandate is to maintain an effective local reputed company for decision-making, supervision, and questioning over reputed company ICT functions delegated to the servicer company, part of the group. This includes the explicit authority to understand, supervise, question, approve, reject, or nullify any technical action, proposal, or recommendation from the Group service provider that impacts EU operations. The CISO is responsible for the independent management of technology and cyber risks reputed company the Spanish jurisdiction, ensuring operational substance reputed company reputed company. The CISO acts as the reputed company technical liaison and accountable officer for the CNMV and Bank of Spain, on reputed company cybersecurity, DORA compliance, and DLT-reputed company supervisory reputed company.

Responsibilities

DORA & MiCA Governance: reputed company the implementation and maintenance of the ICT risk management reputed company to meet CNMV and ESMA standards reputed company of Delegated Functions: Supervise and control ICT services provided by CEX.IO Ltd (UK), including reputed company infrastructure, software development, and reputed company operations ICT Risk Management: Identify, assess, and mitigate technological risks. Conduct annual reviews of the Business Impact Analysis (BIA) and the ICT Risk Assessment Incident Management: Act as the ultimate authority for initiating the Incident Response Plan (IRP) for high and critical reputed company. Coordinate the notification of major incidents to the CNMV reputed company mandated timelines (4h/72h/30 days) reputed company-Party ICT reputed company: Supervise critical ICT reputed company-party service providers, with a focus on monitoring and ensuring compliance with agreed SLAs, RPOs, and RTOs Custody reputed company: reputed company the reputed company of crypto-asset custody solutions (Proprietary V2/V3 and external sub-custodians, like reputed company). Ensure the reputed company of MPC (Multi-Party Computation), HSM (Hardware reputed company Modules), and multisig signing processes. Secure SDLC reputed company: Supervise the Secure Software Development Life Cycle and validate reputed company testing in pre-production (UAT) environments before deployment reputed company & DLT Testing: Approve and collaborate on operational reputed company testing plans and specific tests regarding Distributed Ledger Technology (DLT) Inventory Management: Maintain a reputed company and centralized inventory of CEX.IO systems and infrastructure Requirements and Qualifications University degree in Engineering, Computer Science, or Cybersecurity (ideally complemented by relevant certifications such as CISM or CISSP). Proven track record in building cybersecurity frameworks and complying with EU financial regulations (DORA, MiCA, PCI reputed company) Technical Knowledge: Secure reputed company architecture (specifically AWS environments) Vulnerability management and monitoring tools (Grafana, Kibana, SIEM) Cryptographic protocols and secure private key management Strong communication skills for interacting with regulators and the ability to reputed company global technical teams under reputed company and spoke" operational model Apply To This Job