Head of Technology & Security – Brazil

Role overview

This is a rare chance to own technology and security end to end at the birth of a regulated European crypto entity, with the autonomy to build it your way and the backing of an established, publicly listed global group. We are looking for a Head of Technology & Security to take full ownership of the technology, infrastructure and cyber security of our newly licensed Austrian entity.

You will act as the entity's CISO and lead the Technology & Security function, covering technology and engineering, IT security, and infrastructure. You will own our compliance with DORA and the wider ICT regulatory framework, set the security baseline, lead incident response, and build the technology function as the entity scales from launch toward its full operating model.

You will not be starting from a blank page. You will inherit a strong policy framework and the backing of an established global technology function, and take local ownership, turning documented controls into a live, operating, audit-ready technology environment. The ideal candidate combines deep technical and security expertise with the judgment to operate in a regulated financial environment and the drive to build a function from the ground up.

Key Responsibilities

• Own the cyber security and operational resilience of the entity's ICT systems and data, acting as CISO, setting security baselines, access controls, encryption standards and secure configuration across all ICT assets.
• Lead incident response end to end. Detection, containment, forensic investigation and recovery, ensuring ICT-related incidents are classified, documented and reported in line with DORA.
• Sit as the senior technology and security voice in the entity, with direct access to the Management Board and genuine authority over technology decisions and priorities.
• Own the entity's compliance with DORA, the associated Delegated Regulations and GDPR from a technology and security perspective, keeping the policy framework current and demonstrably implemented.
• Lead the technology and engineering function. ICT infrastructure, system architecture, releases and change management, ensuring stable, scalable and secure operations, and supporting the security of wallet and custody technology alongside the safeguarding function and group.
• Oversee penetration testing, vulnerability management, continuous monitoring and security event detection, and ensure secure backup, recovery and business continuity measures are in place and regularly tested.
• Own ICT third-party and cloud security from a technical perspective, and manage identity and access across systems (SSO, MFA, least-privilege, access reviews) as the technical backbone of the control environment.
• Work across Operations, Legal & Compliance, Risk and group technology, translating technical and security risk into clear terms for non-technical stakeholders, and report on security posture, incidents and ICT risk to the Senior Representative and Management Board, supporting internal and external audits.
• Build, develop and lead the Technology & Security team as the entity scales.

Requirements

• 7–10 years of experience in technology and information security, including leadership at Head or CISO level (or equivalent senior security role).
• Strong background in a regulated financial services, fintech, payments or crypto environment, ideally within the EU or Austria.
• Able to define what good looks like in this domain and operate autonomously, setting the standard rather than waiting for direction.
• Deep working knowledge of DORA, including incident classification and regulatory reporting, plus the associated ICT risk-management requirements; familiarity with MiCAR and GDPR.
• Hands-on expertise across cyber security, cloud infrastructure, network and endpoint security, encryption and identity and access management.
• Understanding of crypto-asset custody technology such as wallet architecture, key management and signing security is a strong advantage.
• Experience managing ICT third-party providers and cloud security in a regulated context.
• Strong process and documentation discipline, able to turn a policy framework into demonstrable, audit-ready controls.
• Comfortable in a fast-moving, build-from-scratch environment with evolving regulatory requirements.
• Excellent leadership and communication skills, able to work across functions and report credibly to the board and regulators.
• Fluency in English is required; German is an advantage.

Why this role

Few roles offer this mix: the autonomy of building a function yourself, the safety of an established global group behind you, and the challenge of getting a regulated crypto platform right from day one. You will take local ownership of a strong regulatory framework, secure the systems that safeguard client assets, and build the technology function that the whole business runs on. If you are a senior technologist who wants genuine ownership, a regulated environment worth getting right, and the chance to build a high-performing team from the start, we would like to hear from you.

Show more Show less