Chief Risk and Information Security Officer (CRISO)

About Us

Trustyfy is a global tech company building the first DeFi bank for companies and individuals.

For the first time in history since the invention of banking, customers – not banks – can have full ownership of their money.

. Thanks to our proprietary multi-signature and decentralized technology, companies can work internationally with no risk of payment delays, and at a fraction of the cost of legacy banks.

. Workers can remit funds to their loved ones at almost no cost.

. And two billion unbanked can become financially independent.

We are not just building the future of finance. We can make a real difference.

We have validated the vision and secured the capital from both recurring revenues and a seed round. Now, we are leveling up our leadership.

Why Your Role Matters

As Chief Risk and Information Security Officer (CRISO), you will be the guardian of trust in everything we build. You will design and lead a modern, forward-thinking risk framework that allows us to grow boldly while staying resilient, compliant, and secure (and protect our customers).  

Key Responsibilities

• Enterprise Risk Management & Governance - Design, own, and evolve the Enterprise Risk Management (ERM) framework, including risk appetite, policies, KRIs, and board-level reporting, ensuring full alignment with company strategy and governance standards.
• Board & Executive Risk Oversight - Lead the Risk Committee, provide consolidated visibility across all risk categories, and deliver clear, actionable risk dashboards to executive leadership and the board.
• Operational, Technology & Cyber Risk - Oversee operational, IT, cybersecurity, technology resilience, and fraud risks, including incident response readiness, cybersecurity investments, and compliance with DORA requirements.
• Data Protection, Privacy & Information Security - Ensure robust data protection and information security controls, partner closely with the DPO to integrate GDPR and privacy risks into ERM, and manage data breach escalation within regulatory timelines.
• Financial & Prudential Risk Management - Ensure financial risk frameworks align with Basel, EBA, and relevant local supervisory expectations, supporting a sound and scalable banking and DeFi operating model.
• Regulatory & Supervisory Engagement - Coordinate all risk-related interactions with regulators across jurisdictions (e.g. ECB, EBA, FCA, NBB, CSSF), and proactively monitor regulatory developments impacting digital banking, payments, crypto-assets, and AML/CFT.
• Product, Innovation & DeFi Risk Assessment - Evaluate risk implications of new products, features, DeFi protocols, and tokenized services, ensuring innovation is launched safely and in compliance with applicable regulations.
• Third-Party, Partnership & Platform Risk - Assess and manage risks related to fintech partnerships, Banking-as-a-Service (BaaS) models, vendors, and platform dependencies, embedding risk controls into commercial and technical decisions.

Your Skills and Experience

• Master’s degree in Finance, Risk Management, Economics, Computer Science, Cybersecurity or related field, or equivalent experience.
• Years in risk management within a bank, digital bank, fintech, or regulated financial institution.
• Proven experience with IT & cybersecurity risk, operational resilience, cloud environments, open banking, and data protection.
• Experience managing regulatory reviews and interacting with supervisory authorities.
• Knowledge of crypto-asset risk (if applicable): custody, key management, smart contract risk, MiCA framework.
• Strong understanding of Basel II/III, ICAAP, ILAAP, DORA, PSD2, GDPR, ISO 27001, NIST CSF, Cloud risk (AWS, Azure, GCP, etc.), Model risk management & AI governance
• Independent thinker with strong ethical standards.
• Excellent communication & analytical skills.

Extra Benefits

• Support for relocation, visa, housing, and health insurance if required.