Chief Information Security Officer

Reporting directly to the Global CTO, the Chief Information Security Officer (CISO) & Head of Information Technology will serve as Trustly’s most senior security and internal technology operations executive. This is a dual-scope role: you will own the full information security program - strategy, architecture, risk, and response, while also leading the IT organization that underpins Trustly’s global workforce, including driving our AI productivity journey. You will be a key voice to the C-suite and a trusted advisor to the Board on all matters related to security posture, cyber risk, and technology resilience.

Responsibilities

Define and execute Trustly’s global information security strategy, roadmap, and multi-year program, aligned to business objectives and risk appetite; Own the enterprise security architecture across cloud infrastructure, payment systems, APIs, and internal applications; Build and mature security capabilities spanning identity and access management, threat detection and response, data protection, application security, and vulnerability management; Lead and develop a high-performing security team; Champion a security-first culture; Lead the global IT function, overseeing end-user computing, workplace technology, service desk, network infrastructure, and enterprise systems; Drive operational excellence and reliability across IT services; Lead global workforce productivity improvements centered around AI; Own IT vendor relationships and enterprise tool strategy; Oversee IT disaster recovery and business continuity programs; Own cybersecurity risk framework; Ensure compliance with applicable regulatory requirements including PCI DSS, SOC 2, GDPR, DORA, ISO 27001, CCPA, and open banking regulations; Partner with Legal and Compliance; Lead third-party and vendor risk management; Oversee Security Operations Center (SOC), threat intelligence, and incident response capabilities; Serve as executive incident commander for major security events; Continuously improve detection engineering, red team / blue team programs, and tabletop exercise cadences; Present security and IT risk posture to Board of Directors and executive leadership; Partner with CTO, CFO, General Counsel, and other C-suite executives; Represent Trustly externally with regulators, auditors, strategic partners, and industry bodies

Requirements

15+ years of progressive experience in cybersecurity, with demonstrated breadth across security architecture, risk management, compliance, and security operations; Proven track record of building and scaling enterprise security programs in complex, high-growth environments; Hands-on experience navigating regulatory frameworks (e.g. PCI DSS, ISO 27001); Deep knowledge of cloud security (AWS, GCP, and/or Azure), DevSecOps practices, and modern security tooling; Executive presence and communication skills, with the ability to engage a Board of Directors and translate complex technical risk into strategic business terms; Experience leading high-performing, geographically distributed teams in a global organization; Strong vendor and contract management experience; Prior CISO title or equivalent accountabilities at a technology company, financial institution, or regulated fintech; Experience managing IT organizations at scale, including enterprise infrastructure, end-user technology, and IT operations; Experience at a payments company, open banking platform, or financial services organization operating under multiple regulatory regimes; Familiarity with open banking infrastructure, API security, and payment rail security considerations; Advanced security certifications such as CISSP, CISM, or CISA; Experience with security program build-out and audit readiness

Nice to have

Multilingual capability or experience working across U.S., EU, and APAC operating environments

Benefits

Flexible paid time off & generous PTO accrual plans; Comprehensive medical, dental, vision, and other insurances; FSA & HSA plans for medical and dependent care; Home office set-up allowance; Internet stipend; Retirement plan match for 401k and RRSP; Gender-neutral paid parental leave, and more!