About the job
INFINIT, established in 2023, is a fintech scale-up developing an integrated operating system for small and medium-sized enterprises. The company operates across Europe and the Americas, focusing on centralizing banking functions and using AI to help business owners manage operations. INFINIT builds tailored solutions for niche industries and continues to grow its portfolio of AI-driven products.
Role overview
The Chief Information Security Officer (CISO) serves as the primary contact for the Board and the CSSF regarding ICT, security, and operational resilience for INFINIT’s CSSF-licensed Payment Institution in Luxembourg. The CISO designs and implements an IT and security governance framework that matches the organization’s size and risk profile, with a strong emphasis on regulatory requirements such as DORA, CSSF Circular 25/880, and PSD3.
This role involves close collaboration with the infrastructure and technology team, coordination with the Group IT function, and leadership of the Payment Institution’s regulatory governance. As INFINIT expands its services across Europe, the CISO will engage with local regulators and ensure compliance with ICT and security standards in each country where the company operates.
Formal designation as the entity’s ICT Risk Management responsible before the CSSF is required, in line with DORA and CSSF Circular 25/880. The CISO represents the institution during both on-site and remote supervisory reviews by the CSSF.
Requirements
- 6-7 years or more of experience in relevant information security or ICT risk management roles
- Strong understanding of regulatory frameworks, including DORA, CSSF Circular 25/880, and PSD3
- Experience engaging with regulators and ensuring compliance in a financial services context
Location
Luxembourg
