Key Skills

Job Description

Ready to shape how the world sees security and trust in payments? Join FinDock as our Information Security Officer At FinDock, we believe payments should do more than process transactions—they should build trust, deepen relationships, and deliver happiness. As the #1 Customer Payment Management solution built natively on Salesforce, we empower organizations to deliver seamless, secure, and personalized payment experiences. Trusted by hundreds of organizations worldwide and rated 4.97 stars on the Salesforce AppExchange, we’re shaping the future of payments. That’s why we proudly say: FinDock. For Customer Payment Happiness. What’s your role? As Information Security Officer, you protect our digital backbone providing hands-on impact. It is an operational role where you will work across teams to align security with innovation and help customers trust every interaction. What you’ll Do: Drive the execution of FinDock’s security policies and roadmap Align policies with GDPR, CCPA, and customer contracts; own risk governance and certifications (ISO 27001, SOC 2) Review architecture, guide secure development, and embed security in engineering workflows Run security tools and processes—vulnerability scans, access controls, security incident response Promote a security-first culture with training, simulations, and cross-team collaboration Support Sales and customers with up-to-date trust collateral and clear security positioning when needed What makes you the perfect fit? Experience: 5+ years in information security, GRC, or DevSecOps. You’ve led risk assessments, built mitigation plans, and maintained risk registers. You bring deep knowledge of ISO27001, SOC 2, GDPR, and secure software development practices. Skills: You communicate clearly and engage with both technical and executive audiences. You’re hands-on with security tooling and help teams apply it well. You bring structure, collaborate across functions, and support others in working securely. Fluency in Dutch language preferred. Mindset: You care about quality and trust. You take ownership, stay calm under pressure, and bring clarity to complexity. You’re pragmatic, proactive, and help others work securely. Why join FinDock? Make an impact: Help shape how FinDock grows securely, serves customers with confidence, and builds trust across the Salesforce ecosystem. Grow with us: Grow your influence across systems, teams, and trust. Your voice will shape how we protect, scale, and build secure-by-default practices. Enjoy our perks: Stock Appreciation Rights, Pension and hybrid working, Travel and phone allowance, Paid volunteer days, Personal learning budget Thrive in our culture: Join a passionate team where learning is constant, progress beats perfection, and support is a given. We challenge with care, celebrate small wins, and work with trust and purpose. We’re proud to be a Great Place to Work®—top-rated for the 4th year in a row. At FinDock, happiness isn’t just for our customers—it’s for our team, too. 📞 Ready to join the team and help us ship with confidence? Contact Boryana Delcheva. We’re excited to hear from you!

Core Responsibilities

Execute FinDock’s security policies and roadmap, manage risk governance and certifications, and align security practices with privacy regulations and customer contracts. Review architecture, support secure engineering, operate security tools and incident processes, promote security awareness, and assist Sales and customers with security information.

Requirements

Requires at least five years of experience in information security, GRC, or DevSecOps, including risk assessments, mitigation planning, and risk register maintenance. Candidates should have strong knowledge of ISO 27001, SOC 2, GDPR, and secure software development, along with clear communication and hands-on security tooling skills; Dutch fluency is preferred.

Benefits

• Stock Appreciation Rights
• Pension
• Hybrid Working
• Travel Allowance
• Phone Allowance
• Paid Volunteer Days
• Personal Learning Budget