XTB is a global company from the financial industry, focusing on online trading of financial instruments. We are the largest FinTech in Poland and a leader in Central and Eastern Europe, and the range of our operations covers several countries, including Asia and South America. At XTB, we focus on the development of our employees, giving them opportunities to gain knowledge and skills in various fields, as well as offering a number of training and development programs. If you are looking for challenges and want to gain valuable experience in an international business environment, XTB is the right place for you.
We are a certified Great Place to Work company.
As our Information Security Officer (ISO) you will be based in Lithuania and will hold primary local responsibility and accountability for safeguarding the Company's information assets, technology infrastructure, and digital operations, ensuring full alignment with European Union regulations (e.g., DORA) and Bank of Lithuania cyber security guidelines.
As our Information Security Officer, you will safeguard our digital domain and operational resilience - oversee and ensure the Company's ongoing compliance with applicable ICT risk management standards, regulatory frameworks, and Bank of Lithuania security mandates. While maintaining local oversight, you will be supported by global IT Security infrastructure, centralized SOC monitoring, and enterprise engineering capabilities.
Your daily impact will include:
Maintain, localize, and enforce the Company's Information Security Management System (ISMS), policies, and operational standards to ensure alignment with Lithuanian laws, Bank of Lithuania rules, and EU DORA requirements.
Supervise the business continuity and ICT incident management process. Coordinate swift containment and resolution of security events in conjunction with the Group security function.
Serve as the primary point of contact for the Bank of Lithuania and statutory authorities regarding ICT security audits, cyber incident reporting, and supervisory inquiries.
Evaluate ICT supplier risks, oversee vendor security reviews, and ensure critical service providers comply with regulatory security requirements.
Deliver periodic cyber security guidance, phishing simulations, and training programs to local staff to foster a proactive security culture in cooperation with IT Security Team
Prepare and deliver detailed critical security reports, risk metrics, and regulatory updates to executive management and the Group compliance and technology functions.
Based in Lithuania, with fluency in Lithuanian and English (both written and spoken) to seamlessly interface with local regulators and international team members.
At least 4-5 years of professional experience in an Information Security, Cyber Security, or IT Risk Management role within a licensed financial institution, brokerage, or FinTech company in Lithuania or the EU.
Deep understanding of DORA (Digital Operational Resilience Act), EBA ICT guidelines, ISO/IEC 27001 standards, and Bank of Lithuania security regulations. Knowledge of IT standards (ITIL v4, COBIT, etc) ) and tools is a major plus.
Professional credentials such as CISSP, CISM, CISA, CRISC, or ISO 27001 Lead Auditor/Implementer are highly valued.
Strong analytical capabilities, sound judgment under pressure, impeccable ethical standards, and the ability to translate complex security requirements into scalable business workflows.
Excellent communication skills to facilitate efficient support and information sharing with Product & Technology and Legal & Compliance Departments.
Collaborative culture with close cooperation across C-level, IT Security, Legal, Operations, and Business teams.
Opportunities for professional growth and continuous learning in a fast-paced financial sector.
A modern, supportive, and international working environment.
Hybrid working arrangements.
Support governance, risk and compliance across information security and privacy by coordinating assessments and audits, maintaining controls and documentation, and helping teams address risks and findings.
Drive risk and compliance assurance for products and cloud services by managing security assessments, vendor risk reviews, audits, and control monitoring to strengthen organizational security and customer trust.
Gerencia a governança de identidades e acessos, garantindo provisionamento seguro, conformidade, revisões periódicas e mitigação de riscos em sistemas e ambientes corporativos.
Analista de Processos e Governança de TI responsável por estruturar e manter a CMDB, aplicar práticas ITIL e fortalecer a governança de ativos, configurações, mudanças e conformidade.
Develop risk assessments, security control metrics, and practical compliance standards while coordinating awareness initiatives and security improvements across technical teams and business functions.
