About Safello
Safello is the leading cryptocurrency exchange in the Nordics, committed to making digital assets more accessible and secure for investors. As part of our vision to build the next-generation crypto bank, we are now looking for an ICT Security Officer to take ownership of our end-to-end security. At Safello, we work relentlessly, around the clock, to make crypto accessible to everyone while ensuring compliance and security at every step.
The Role
In this role, you will be the driving force behind Safello’s security posture—safeguarding day-to-day operations, maintaining governance and compliance standards, and shaping strategic security initiatives that protect our systems, employees, and customers. You will report to the CTO and collaborate closely with executive leadership (CEO, CTO, CCO), product teams, and other stakeholders to ensure robust, agile, and compliant security practices across the organization.
Key Responsibilities
•Safeguard Security Across the Organization:
Oversee security for day-to-day company operations—encompassing company premises, employee devices, password management, access control, data encryption, secure code practices, and threat modeling. Coordinate and handle incident response and management to protect sensitive data and maintain business continuity.
•Drive Governance and Compliance within ICT:
Develop and implement cybersecurity policies and practices in line with frameworks such as DORA, NIS2, EBA, and ESMA guidelines. Work on incident management, business continuity, and third-party risk management to ensure compliance with evolving regulations.
•Operate Strategically and Practically:
Collaborate with executive leadership to define overall security strategy, while partnering with product teams to implement hands-on solutions that mitigate threats and maintain a high-security environment.
•Foster a Culture of Security:
Champion best practices across the organization, providing training, documentation, and guidance for secure onboarding/offboarding processes.
Who You Are
•Experienced Professional: 7+ years of experience in cybersecurity and information security, ideally in high-security or regulated industries.
•Technical Expertise: Solid understanding of device management, hardware keys, secure offboarding/onboarding, ACLs, encryption, database security, and overall end-to-end security operations.
•Regulatory Familiarity: Exposure to relevant regulations (DORA, NIS2, EBA, ESMA) with the ability to integrate compliance and governance into day-to-day processes. (Deep expertise is a plus, but not mandatory.)
•Strategic & Hands-On: Skilled at translating high-level policy requirements into practical technical standards and solutions.
•Incident Management: Proficient in developing and executing incident response plans, ensuring swift mitigation and recovery.
•Fintech or Regulated Background: Previous experience in fintech or financial services is highly desirable.
•Cryptography & Blockchain: Comfort with cryptography concepts and interest or experience in blockchain technology and cryptocurrency infrastructures.
•Educational Background: Degree in a STEM field or equivalent practical experience.
Why Join Us?
•Flexible B2B Contract: Enjoy autonomy in your schedule and invoicing, including Swedish public holidays off without deductions.
•Cutting-Edge Equipment: We provide all necessary hardware and software tools.
•Fully Remote: Work from anywhere at CEST timezone overlap, with the option to visit our Stockholm office.
•Growth & Impact: Be part of a fast-growing company where you can significantly influence the future of financial systems and digital asset infrastructure.
How to Apply
If you are excited about advancing security in the rapidly evolving crypto landscape, we would love to hear from you! Please submit your CV/Resume and any relevant documentation or references demonstrating your security expertise. We review applications and conduct interviews on a rolling basis, so apply today to help us uphold the highest security standards at Safello!
