Head of IT Compliance (1st line)

Permanent employee, Full-time · Berlin, Porto, (Remote) Germany, (Remote) Portugal

Your mission

Head of IT Compliance (1st line) plays a key role in supporting engineering teams to build secure, resilient, and regulatory-compliant systems. This role provides technical expertise and facilitates the implementation of compliance measures as defined in organizational policies and regulatory frameworks, ensuring that technical solutions align with documented standards. By fostering collaboration and operational stability, they act as a trusted advisor, helping engineers implement best practices while maintaining compliance with industry regulations.

In this role, you will:

Support Compliance Implementation

Provide support to engineering teams on implementing compliance measures defined in organizational policies and regulatory standards such as BAIT, MaRisk, DORA, and ISO 27001.
Act as a facilitator for engineers to understand technical aspects of compliance requirements documented by the organization.
Manage internal cross-functional projects addressing compliance and security initiatives.

Operational Resilience Enablement

Support the integration of resilience measures into systems and processes, ensuring alignment with organizational standards for operational stability.
Assist in embedding resilience and security controls into technical workflows as specified in documented organizational frameworks.

Collaboration and Stakeholder Engagement

Facilitate effective communication between engineering teams and compliance or risk stakeholders to ensure clarity and alignment with documented requirements.
Serve as a technical liaison to support the execution of compliance measures while maintaining clear accountability boundaries.

Addressing Risks

Assist engineers in addressing risks identified through organizational risk management processes, ensuring timely and effective implementation of remediation measures.
Provide technical input to mitigate vulnerabilities during system development or operations.

Documentation and Audit Readiness

Maintain accurate documentation of technical implementations and compliance-related activities to support audit readiness and organizational transparency.
Ensure that technical records align with organizational policies and are accessible for review by relevant stakeholders.

Incident Support

Assist engineering teams in addressing incidents requiring technical compliance expertise, ensuring actions align with organizational policies and frameworks.

What you need to be successful:

Key Competencies

Technical Expertise: Advanced understanding of ICT systems, operational resilience, and regulatory frameworks (e.g., BAIT, MaRisk, DORA, ISO 27001).
Regulatory Knowledge: Awareness of compliance requirements as documented in organizational policies and the ability to implement technical solutions in alignment with these standards.
Collaboration: Proven ability to work with engineering teams and compliance stakeholders, facilitating clear and effective communication.
Problem-Solving: Skilled at translating compliance requirements into actionable technical steps for engineers.
Documentation Skills: Ability to create and maintain clear, accurate records of technical activities for compliance and audit purposes.
Adaptability: Balances the need for compliance adherence with the demands of engineering innovation.

Qualifications and Experience

Extensive experience in ICT systems engineering or a related technical field.
Familiarity with compliance frameworks such as BAIT, MaRisk, DORA, ISO 27001, or similar.
Strong track record of implementing technical controls and supporting operational resilience within regulated industries.
Proven ability to collaborate effectively with cross-functional teams, including technical and compliance stakeholders.

Qualities

Collaborative mindset, fostering teamwork between engineering teams and compliance functions.
Transparent and integrity-driven, committed to maintaining trust across organizational stakeholders.
Proactive and solution-oriented, balancing technical execution with compliance requirements.

What’s in it for you:

Accelerate your career growth by joining one of Europe's leading cryptocurrency management platforms
25 vacation days per year, with an additional day for each year of service - up to 30 days
Access to cutting-edge technologies, high levels of autonomy, and international working environment
Flexible working hours, hybrid work setup from both our Berlin and Porto offices
Fitness (Urban Sports Club) and mental health (Likeminded) memberships
Hot/cold drinks and snacks in the office, and All Hands meetings once a month with pizza

Apply for this job

About us

Finoa is a regulated crypto asset platform for institutional investors co-founded in 2018 by Christopher May and Henrik Gebbing. The company came to life through the shared aspiration to make institutional interactions with crypto assets simple and secure, and is backed by prominent investors, including Balderton Capital, Coparion, Maven11, Signature Ventures, and Venture Stars.

Finoa has since then grown into a truly international company, powered by a diverse team and serving high-profile clients from around the world. Reference clients include renowned venture capital firms, crypto hedge funds, corporates, Web3 companies, and high-net-worth individuals.

If you want to join one of Europe’s most exciting crypto start-ups, be part of the next wave of innovation disrupting finance, and grow together with us, then this is your chance to apply.

Finoa is an equal opportunity employer devoted to diversity and inclusion in the workplace. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, or disability status.

Apply for this job

We are looking forward to hearing from you!

Thank you for your interest in Finoa! Please fill out the following short form. Should you have difficulties with the upload of your data, please send an email to people.ext@finoa.io