Your Purpose 

This is a rare, high-impact opportunity for an operator who thrives at the intersection of financial services, technology, and commercial leadership. You will inherit a business with strong product-market fit, a growing enterprise client base, and a talented cross-functional team — and you will be expected to pour fuel on it.

The role is the result of organisational growth: the current GM has seen their remit expand well beyond Bitso Business. You will step in as the single accountable owner of the business unit, reporting directly to the Chief Operating Officer, and leading teams spanning Product, Engineering, Marketing, Sales, and Account Management under one P&L.

Reports To

Chief Operating Officer

Who You Are 

• 10+ years of progressive leadership experience in high-growth technology, fintech, or financial services companies
• 5+ years in a GM, COO, VP of Business, or equivalent P&L leadership role — ideally running a business unit of comparable scale and complexity
• Proven track record of scaling B2B revenue from early traction to significant ARR, ideally in payments, banking infrastructure, or SaaS for financial services
• Experience managing and developing multi-functional teams of 50+ people, including product, engineering, and commercial functions
• Strong background in the Mexican and/or Latin American financial services or fintech landscape — including familiarity with the regulatory environment (CNBV, Banxico, CONDUSEF) as a nice to have.
• Experience working within or alongside crypto, blockchain, or digital assets businesses is a strong plus; an open, curious mindset toward the technology is a must
• Proven ability to build and close enterprise sales cycles with financial institutions, fintechs, or large corporates
• Experience operating in a fast-moving, startup-to-scale environment where ambiguity is the norm and resourcefulness is required
• Fluency in Spanish is required; proficiency in English is required for executive and international interactions

Leadership & Capabilities:

• Exceptional commercial instincts — you understand how to build revenue, manage pipelines, structure deals, and retain customers
• Strong analytical and financial acumen — comfortable owning a P&L, interpreting data, and making evidence-based decisions
• Inspiring people leader who earns trust quickly and brings out the best in diverse, high-performing teams
• Clear, compelling communicator who can simplify complex ideas for customers, partners, regulators, and internal stakeholders
• Operator mindset: you are hands-on when needed, but know how to delegate and build systems that scale
• High emotional intelligence and the ability to thrive in — and positively shape — a dynamic, rapidly evolving company culture

What You Will Do 

• P&L and Business Performance: You will be the ultimate accountable owner for Bitso Business's top-line revenue, gross margin, and EBITDA contribution. This means setting annual and quarterly targets, allocating budget across functions, managing cost discipline, and reporting performance to senior leadership and the board where relevant.
• Go-to-Market (Sales & Account Management): You will lead the commercial engine of Bitso Business — both hunting for new logos and deeply expanding existing relationships. You will build and run a world-class sales and account management organisation capable of serving enterprise-grade clients in financial services, fintech, and corporate treasury.
  
• Product Strategy & Roadmap: Bitso Business's competitive differentiation lives in its product. You will work closely with a senior product team to define a compelling multi-year roadmap that reflects client needs, market dynamics, and Bitso's technical capabilities. You will be the voice of the market inside the product organisation.
  
• Engineering Leadership: You will work alongside a senior engineering leader embedded within the Bitso Business unit, ensuring technical execution is fast, reliable, and aligned with commercial priorities. You are not expected to be a hands-on engineer, but you must be capable of setting clear engineering priorities, managing trade-offs, and holding the team to high standards.
• Marketing & Brand: You will lead a marketing function responsible for positioning Bitso Business as the infrastructure provider of choice in LatAm. This includes content marketing, demand generation, event strategy, thought leadership, and partner co-marketing.
• Organisational Leadership: You will lead an organisation of 80–120 people across multiple functions and, over time, multiple geographies. You will be responsible for building a high-performance culture, attracting and retaining top talent, and developing a leadership bench capable of scaling with the business.
  

Your Team

Lead, manage, and develop a cross-functional team of 80–120 across product, engineering, sales, marketing, and account management. Also, you will work closely with peers across Bitso, including the Chief Technology Officer, Chief Product Officer, Chief Financial Officer, Chief Legal Officer, and heads of the retail and consumer business. Success in this role requires building strong, trust-based relationships across the company and knowing how to align without always having authority.

Research in Diversity, Equity, and Inclusion suggests that individuals may hesitate to apply for jobs if they do not meet all the listed criteria. At Bitso, we value diversity and your unique strengths could be just what we're looking for. If this role excites you but you don't match every point in the description, we still want to hear from you.

#LI-Remote 

Your Purpose 

We're looking for a resourceful, analytical, and execution-obsessed B2B Growth Marketing Specialist to become the operational backbone of our marketing team. This is a hybrid role that spans demand generation, event operations, campaign execution, and marketing ops, all with a relentless focus on pipeline growth and efficiency.

You'll own programs end-to-end: from building the strategy and managing vendor relationships to tracking budgets, analyzing results, and iterating fast. Events are an important part of the mix, but so are ABM plays, content-driven lead gen, partner marketing, and everything in between.

We need someone who doesn't wait for instructions. You see a gap, you fill it. You use AI tools daily to multiply your output. You're as comfortable building a campaign report in HubSpot as you are negotiating a venue contract or writing a landing page brief. If you thrive in fast-paced, "do more with less" environments, this role is for you.

Reports To

Senior Marketing Manager for Bitso Business - Ingrid Carraro

Who You Are 

• 4+ years of experience in B2B marketing, ideally in roles that combined demand gen, events, and marketing ops.
• A genuine growth mindset — you're metrics-driven, experiment-happy, and always looking for the next lever to pull.
• Solid experience managing events and marketing budgets, vendor contracts, and multi-vendor logistics.
• Hands-on proficiency with HubSpot (Marketing Hub & CRM).
• Strong analytical skills: you're comfortable in spreadsheets, dashboards, and data. You make decisions with numbers, not gut feeling.
• Heavy, daily user of AI tools: you already use AI to write, analyze, automate, and create. This is non-negotiable.
• Exceptional organizational skills: you manage multiple projects, deadlines, and stakeholders without dropping balls.
• Excellent written and verbal communication in English and Spanish.
• Based in Mexico City with availability for occasional travel.
• Nice-to-Have
  • Experience in fintech, financial services, or enterprise SaaS B2B environments.
  • Familiarity with ABM platforms (Demandbase, 6sense, HubSpot ABM).
  • Experience with paid media management (Google Ads, LinkedIn Ads, Meta).
  • Knowledge of SEO/SEM fundamentals and content marketing strategy.
  • Experience with analytics and BI tools (Google Analytics, Looker, Tableau).
  • Experience with event platforms (Whova, Cvent, others).

What You Will Do 

• Event Marketing & Field Programs
  • Manage the end-to-end logistics of B2B marketing events: trade shows, hosted dinners, executive roundtables, webinars, virtual summits, and partner activations.
  • Source, negotiate, and manage external vendors (venues, A/V, catering, booth production, swag, event platforms) and own all related contracts and payments.
  • Build pre-event, during-event, and post-event engagement strategies to maximize pipeline impact from every event dollar spent.
  • Capture and repurpose event content (recordings, insights, testimonials) into downstream marketing assets.
• Budget, Vendor & Project Management
  • Own and manage marketing budgets across events and campaigns: forecasting, PO tracking, invoice reconciliation, and ROI reporting.
  • Manage multiple vendor and agency relationships simultaneously, ensuring deliverables are on time, on budget, and on brand.
  • Maintain rigorous project management practices across all workstreams — timelines, briefs, status updates, and stakeholder alignment.
• Marketing Operations & Analytics
  • Be able to manage workflows, lead scoring, email automation, campaign attribution, list segmentation, and reporting dashboards on HubSpot.
  • Ensure data hygiene across the CRM: proper UTM tagging, lead source tracking, duplicate management, and lifecycle stage accuracy.
  • Build and maintain performance dashboards that give leadership clear visibility into marketing's impact on pipeline and revenue.
  • Analyze campaign and channel performance to deliver actionable insights and recommendations to the team.
• AI-Powered Productivity & Automation
  • Use AI tools (Claude, ChatGPT, Midjourney, Jasper, Notion AI, etc.) daily across the workflow — content drafting, data analysis, creative production, vendor research, reporting, and process automation.
  • Identify and implement automation opportunities to eliminate manual, repetitive work across marketing operations.
  • Stay on top of emerging AI-powered martech tools and proactively bring recommendations to the team.
  • Be a force multiplier — consistently deliver the output of a much larger team by working smarter with technology.
• Content & Creative Collaboration
  • Collaborate with content and design teams (or lead directly when needed) to produce campaign assets: landing pages, emails, social content, one-pagers, presentations, and sales enablement materials.
  • Write clear, compelling briefs for creative and content requests, ensuring alignment with campaign goals and brand standards.
  • Support thought leadership efforts by coordinating webinar content, blog topics, and industry POV pieces with subject-matter experts
• Cross-Functional Alignment
  • Work closely with Sales to ensure marketing programs/events are aligned with pipeline goals, territory plans, and target account lists.
  • Partner with Product Marketing to translate product narratives into demand gen campaigns and event messaging.
  • Provide regular performance updates and strategic recommendations to leadership.

Research in Diversity, Equity, and Inclusion suggests that individuals may hesitate to apply for jobs if they do not meet all the listed criteria. At Bitso, we value diversity and your unique strengths could be just what we're looking for. If this role excites you but you don't match every point in the description, we still want to hear from you.

#LI-Remote 

Your Purpose 

As Associate General Counsel you will serve as the lead legal partner for our Mexico business, owning the legal strategy and day-to-day legal support for all matters related to our local operation. This is a highly impactful role at the intersection of law, regulation, product, and business execution.

You will help shape how a fast-growing financial services platform operates in one of the most dynamic and highly regulated markets in the region. From supporting product launches and commercial initiatives to advising on regulated operations, customer experience, governance, and regulatory engagement, you will play a critical role in enabling sustainable growth while protecting the business and maintaining a strong legal and regulatory posture.

This role is ideal for a business-oriented lawyer with strong financial regulatory experience in Mexico who wants to work close to decision-making, influence strategy, and help build a legal infrastructure that scales with the company.

Reports To

Deputy General Counsel

Who You Are 

• Law degree and active license to practice in Mexico.
• 8+ years of relevant legal experience, with a significant portion focused on financial services, fintech, payments, banking, securities, or other highly regulated industries.
• Strong expertise in Mexican financial regulation, with demonstrated experience advising on regulated financial products, services, or operations.  
• Deep familiarity with the Mexican regulatory landscape, including CNBV, Banco de México, CONDUSEF, and related supervisory frameworks.
• Proven experience advising on the legal and regulatory implications of product design, launches, operational changes, partnerships, and customer-facing flows.
• Strong judgment in assessing legal and regulatory risk in fast-moving business environments and translating it into practical, commercially sound recommendations.
• Experience drafting, reviewing, and negotiating commercial agreements, strategic partnerships, vendor contracts, customer terms, disclosures, and other legal documentation.
• Experience handling regulatory inquiries, examinations, supervisory processes, information requests, or other interactions with Mexican authorities.
• Strong working knowledge of consumer protection, data privacy, marketing review, outsourcing/vendor structures, and corporate governance matters relevant to financial services operations in Mexico.
• Excellent written and verbal communication skills in Spanish and English, including the ability to explain complex legal and regulatory issues in clear business terms.
• High ownership mindset, strong responsiveness, and comfort operating as the primary legal point of contact for a country-level operation.
• Experience supporting fintech, payments, digital assets, broker-dealer, or other innovative financial products is a strong plus.
  

What You Will Do 

• Serve as the primary legal advisor for all matters related to the Mexico operation.
• Provide legal and regulatory support across the full lifecycle of the business in Mexico.
• Advise on the legal and regulatory aspects of launching, modifying, and maintaining products and services offered in Mexico.
• Partner closely with Product, Compliance, Operations, Risk, Finance, and leadership to evaluate legal risk and enable compliant, scalable business solutions.
• Review and advise on customer-facing terms, disclosures, onboarding journeys, in-app flows, marketing materials, and communications for the Mexican market.
• Lead legal analysis for new initiatives, features, partnerships, and expansion opportunities affecting the Mexico business.
• Draft, review, and negotiate a broad range of legal agreements, including commercial agreements, vendor contracts, partnership arrangements, and local legal documentation.
• Support and manage legal aspects of relationships with regulators and authorities in Mexico, including responses to requests, inspections, visits, follow-ups, and remediation efforts.
• Advise on the impact of legal and regulatory developments in Mexico on the company’s products, processes, and operating model.
• Oversee local corporate governance and entity maintenance matters for Mexico, in coordination with internal teams and external counsel as needed.
• Support dispute management, complaints, pre-litigation matters, investigations, and other contentious issues affecting the Mexico business.
• Manage and coordinate external counsel on local law matters, ensuring high-quality, efficient, and business-oriented support.
• Contribute Mexico legal expertise to regional and global legal initiatives when local input is needed.
  

Your Team

You will lead a local legal team and will be responsible for setting priorities, allocating work, and supporting the team’s development across the full range of matters impacting the Mexico operation.

The role will also partner closely with Compliance, Risk, Product, Operations, Finance, People, and regional and global Legal teams, while managing external counsel and acting as the primary legal escalation point for Mexico.

Research in Diversity, Equity, and Inclusion suggests that individuals may hesitate to apply for jobs if they do not meet all the listed criteria. At Bitso, we value diversity and your unique strengths could be just what we're looking for. If this role excites you but you don't match every point in the description, we still want to hear from you.

Your Purpose 

Imagine being at the forefront of one of the most exciting intersections in tech today: where product, AI and privacy meets crypto and financial innovation across LatAm. As a Digital & Privacy Associate Counsel at Bitso, you will be a key player in building and scaling our global digital and privacy programme during a period of aggressive expansion and new product launches, while operating across Mexico, El Salvador, Colombia, Brazil, Argentina, Gibraltar, and other markets.

You will work directly advising Product, Data Science, Information Security, Engineering and Legal teams in other countries on cutting-edge issues like AI governance, cross-border data flows, and privacy-by-design for financial products, and be the go-to LatAm privacy expert.

If you are passionate about this, thrive in fast-paced environments, and want to shape the strategy of LatAm's leading crypto platform, this role was made for you.

Reports To

Data Protection Officer and Deputy General Counsel, with strong collaboration with the Mexican legal team and regional teams in El Salvador, Colombia, Brazil, Argentina and Gibraltar.

Who You Are 

• You hold a law degree, with 2–3 years of experience in financial services, fintech, crypto, regulatory affairs, data protection or information law — whether in-house, at a law firm, or at a regulator.
• You are interested in exposure to product, AI, privacy, crypto and financial innovation matters across LatAm.
• You are proficient in both Spanish and English (written and spoken) and can communicate complex regulatory and technological concepts to several stakeholders clearly and persuasively.
• You are highly organized, detail-oriented, and capable of managing multiple regulatory calendars and deadlines across jurisdictions simultaneously.
• You are a self-starter who thrives in remote-first, fast-paced environments and takes ownership of projects without needing close supervision. 

What You Will Do 

• Support the day-to-day execution of Bitso's global AI and privacy compliance programme across Mexico, El Salvador, Colombia, Brazil, Argentina and Gibraltar.
• Implement privacy tools, review and respond to data subject rights requests (ARCO rights) on a daily basis, ensuring compliance with applicable legal deadlines in each jurisdiction.
• Draft, review, and negotiate data processing agreements (DPAs) and privacy clauses with third-party vendors, partners, and business clients.
• Prepare and maintain privacy notices and consent mechanisms in accordance with local laws (LFPDPPP, LGPD, Gibraltar GDPR, and others).
• Conduct and support data protection impact assessments (DPIAs) for new products, services, technologies, processes and M&A transactions.
• Advise on user experience flows.
• Maintain and update PII inventories, data flow maps, and records of processing activities (ROPA).
• Monitor regulatory developments and update our matrix accordingly.
• Advise Product, Information Security, Engineering, Data Science, and Marketing teams on privacy-by-design, AI implementations and product design.
• Support incident response.
• Assist with privacy training programmes.
• Manage filings and updates to national data protection registries.
• Liaise with regional legal teams and country managers to ensure coordinated privacy compliance across all entities.
• Support privacy due diligence for mergers, acquisitions, and corporate projects.

Your Team

You will be part of the Mexican legal team and Privacy team, reporting to the Data Protection Officer, and will collaborate closely with the regional legal teams worldwide as well as cross-functional partners in Compliance, Product, Information Security, Engineering, Data Science, Marketing, and Country Managers.

Research in Diversity, Equity, and Inclusion suggests that individuals may hesitate to apply for jobs if they do not meet all the listed criteria. At Bitso, we value diversity and your unique strengths could be just what we're looking for. If this role excites you but you don't match every point in the description, we still want to hear from you.

#LI-Remote

Your Purpose 

We are looking for a highly motivated Legal Analyst to support Bitso’s Retail product vertical. This role will focus on enabling the launch and scaling of user-facing crypto
products by providing clear, practical and business-oriented legal support. The ideal candidate should have strong attention to detail, solid contract drafting skills, and the ability to navigate regulatory frameworks applicable to fintech and crypto products, while working closely with cross-functional teams in a fast-paced environment.

Reports To

Legal Director

Who You Are 

• Excellent written and verbal communication skills in English and Spanish
• Experience drafting, reviewing and negotiating NDAs, terms and conditions, and commercial agreements with vendors, partners and clients
• Basic to intermediate knowledge of regulatory frameworks applicable to fintech, payments, or cryptocurrency (e.g., AML/KYC, consumer protection)
• Strong analytical skills with the ability to identify legal risks, inconsistencies, and gaps in documentation.
• Ability to translate legal concepts into clear and practical guidance for business and product teams.
• Experience supporting product or business teams in legal matters, preferably in fast-paced or tech-driven environments.
• Strong organizational skills and ability to manage multiple legal requests simultaneously.
• Familiarity with internal workflows or ticketing systems (e.g., Zendesk) for tracking legal requests.
• High attention to detail and ownership mindset when handling legal documentation.

What You Will Do 

Research in Diversity, Equity, and Inclusion suggests that individuals may hesitate to apply for jobs if they do not meet all the listed criteria. At Bitso, we value diversity and your unique strengths could be just what we're looking for. If this role excites you but you don't match every point in the description, we still want to hear from you.

Your Purpose

The Senior Security Engineer is a versatile member of the Security Operations team who brings deep expertise in vulnerability management while actively contributing across the full scope of security operations. You will own the vulnerability management function, but your involvement doesn’t stop there. You are expected to operate as a well-rounded security professional who supports the team across multiple disciplines, including:

• Vulnerability Management
• Cyber Incident Management
• Threat Intelligence and Threat Hunting
• Security Assessments and Tool Evaluations
• Regulatory Compliance and Audit Support

This is a hands-on, execution-focused role within the Security Operations team. The ideal candidate owns the vulnerability management function with discipline and rigor, while consistently contributing to incident response, threat analysis, compliance support, and other operational priorities as they arise. This role requires a senior security professional who operates with a generalist mindset, brings expertise in vulnerability management, and is capable of mentoring junior team members and driving strategic improvements to the security program.

Reports To

Security Operations Lead

Who You Are

• Experience: 5+ years of technical experience in security operations, with strong hands-on experience in vulnerability management. You’ve worked in a SOC, CSIRT, or similar operational security environment where you wore multiple hats and operated with a high degree of autonomy.
• Ops Mindset: You possess a strong sense of urgency and ownership. You don’t wait to be told what to do, you see gaps and fill them. You are willing to participate in a scheduled on-call rotation to effectively address and mitigate critical security incidents outside of business hours.

Technical Proficiency:

1. Hands-on experience with enterprise vulnerability scanning platforms (Qualys, Tenable, Rapid7, or equivalent).
2. Strong understanding of risk-based vulnerability prioritization beyond CVSS factoring in exploit availability, threat intelligence, asset exposure, and business context.
3. Experience investigating security alerts using EDRs and SIEM platforms.
4. Familiarity with endpoint security policies, secure email gateways, and DLP concepts.
5. Ability to produce clear, data-driven reporting for technical and executive audiences.
6. Experience working with Infrastructure as Code (IaC) tools such as Terraform, CloudFormation, or Ansible, including the ability to review and secure infrastructure configurations.

• Cloud Native: Experience working within cloud environments, preferably AWS, with an understanding of cloud-native vulnerability considerations including containers and serverless.
• Automation & Scripting: Experience with Python, Bash, or similar scripting languages to automate workflows, reporting, and integration with ticketing systems. Experience leveraging AI/ML tools to improve operational efficiency is a plus.
• Regulatory & Compliance: Experience supporting regulatory compliance audits and working within frameworks relevant to the Mexican financial regulatory landscape (CNBV, Ley Fintech). Ability to interface with auditors, prepare evidence, and ensure security controls meet local compliance requirements.
• Adaptability: You are comfortable operating outside your primary domain. When the team needs support on an incident, a compliance audit, a threat intel deep-dive, or a security assessment, you lean in without hesitation.
• Bilingual Communication: Required full professional fluency in English and Spanish. You must be able to translate technical findings into actionable guidance for engineering teams, auditors, and non-technical business partners.
• Certifications: Defensive security certifications (GCIH, GEVA) are a plus. Offensive security certifications (OSCP, GPEN, GXPN) are a strong plus.

What You Will Do

• Own and operate the end-to-end vulnerability management lifecycle: discovery, scanning, prioritization, remediation tracking, and verification.
• Prioritize vulnerabilities using a risk-based approach that accounts for exploitability, threat intelligence, asset criticality, and business impact.
• Produce recurring vulnerability posture reports and trend analysis for stakeholders.
• Serve as a technical investigator for complex security alerts and support the investigation, containment, and remediation of security incidents.
• Participate in the on-call rotation to ensure coverage for critical alerts.
• Consume threat intelligence feeds and proactively hunt for Indicators of Compromise (IOCs) in our environment.
• Develop and integrate detection use cases for business applications, ensuring we are logging the right data, not just more data.
• Support regulatory compliance audits, including preparation of evidence and documentation aligned with Mexican financial regulatory requirements.
• Mentor and support junior team members, contributing to knowledge sharing and the overall growth of the security team.

Research in Diversity, Equity, and Inclusion suggests that individuals may hesitate to apply for jobs if they do not meet all the listed criteria. At Bitso, we value diversity and your unique strengths could be just what we're looking for. If this role excites you but you don't match every point in the description, we still want to hear from you.

#LI-Remote 

Your Purpose

As our Information Security GRC Specialist, you will be an integral part of the Information Security Governance, Risk, and Compliance team. Your role is essential to ensure that company security policies, technical standards, and procedures are implemented, maintained, and continuously improved, while overseeing security risk management and compliance with applicable security standards and regulations. Additionally, you will be responsible for coordinating and supporting external/internal security assessments.

As part of the information security governance, risk, and compliance team, you will:

• Use holistic approaches interconnecting governance, risk, and compliance through project management and the application of industry best practices, standards, and regulations.
• Connect information security with other involved teams.
• Drive alignment of all lines of business with the defined information security culture and governance model.
• Use Agile approaches in your projects.
• Focus on proactivity, quality, and excellence in your results.
• Explore strategies and solutions for effective Governance, Risk, and Compliance (GRC) engineering in the organization.

Beyond our team, you will collaborate closely with:

• Organizational risk, compliance, and regulatory internal and external teams to ensure proper adherence to information security compliance processes.
• Technical groups to assist in implementing technical standards, controls, and configurations aligned with security policies, legal requirements, and audit standards.

Reports To
Information Security Program Manager

Who You Are 

• Proven English proficiency. You are comfortable presenting to English-speaking audiences and creating deliverables in that language. You are able to maintain a fluid conversation in English.
• Minimum of 5 years of experience in Information Security GRC roles.
• At least 3 years of experience leading or coordinating internal compliance assessments, internal audits, or acting as a strategic consultant with a focus on maturity assessments.
• At least 3 years of experience working with Mexican regulatory, cybersecurity, and information security requirements applicable to fintech or regulated financial entities.
• You have expert knowledge of information security frameworks and best practices (e.g., ISO/IEC 27000 series, COBIT, NIST SP 800-xx, NIST CSF, and CIS).
• You have working knowledge in scripting to read and modify simple scripts, understand JSON and YAML configuration files, use command-line tools and write basic automation tools.
• You have working knowledge of data analysis to extract relevant information from logs and identify trends and patterns, to turn technical data into business insights.
• You have proficiency in IT audit, compliance, and maturity assessments.
• You hold a Certified Information Systems Auditor (CISA) certification or equivalent credentials with a strong focus on IT audit, assurance, or information security governance.
• You hold a AWS Certified Cloud Practitioner or working knowledge with AWS Cloud Infrastructure. 
• You possess a competent understanding of the risk management process, with emphasis on risk treatment, monitoring, and control assessment phases.
• You possess strong communication skills. These are crucial as the role involves coordinating with internal teams, external auditors, and various technical and non-technical groups. Being able to effectively communicate findings, recommendations, and remediation strategies to different levels of stakeholders is key.
• You are detail-oriented. Given the role's responsibilities in monitoring compliance, identifying gaps, and managing security controls, attention to detail is vital. You should be meticulous in your work to ensure that effective compliance and security measures are in place.
• You are an agile and avid learner. Information security is a rapidly evolving field, so you have a willingness to continuously learn and stay updated on the latest trends, threats, and best practices in the industry. Keeping up-to-date will help in effectively implementing security measures.
• You are passionate about information security, and you can see beyond the technology and controls. You find confluence points and create synergies. You believe in teamwork, and you believe that by empowering an organization to protect itself, you are on the side of a noble and much-needed cause.

Nice-to-have:

• Minimum 2 years of strategic consulting experience, particularly within financial institutions.
• Additional certifications such as Certified ISO 27k Lead Auditor, CISSP, or PMP.
• Working knowledge with maturity models and frameworks (e.g., CMMI), cloud security best practices, project management (PMI), and Agile methodologies (e.g., Kanban).
• Familiarity with international regulations such as GDPR.

What You Will Do 

• Maintain and continuously improve the Information Security GRC Program.
• Act as a key liaison with regulatory authorities on information security–related topics.
• Support the adoption and consistent implementation of security policies, standards, and procedures across all lines of business.
• Assess and validate compliance with applicable regulatory, contractual, and information security requirements.
• Conduct regular information security and maturity assessments of Bitso’s information security controls, and follow up on treatment plans across the organization.
• Continually validate the organization against the internal information security governance framework to ensure compliance, monitor for non-conformities, and prepare reports and metrics with recommended remediation strategies.
• Collaborate with internal and external security audits, proactive technical assessments, and tracking findings and recommendations for appropriate action will be crucial aspects of your responsibilities.
• Guide and support non–security engineering teams, liaise with cross-functional stakeholders as needed, and ensure the quality, consistency, and effectiveness of information security programs and projects.
• Shift from manual compliance assessments to an automated, continuous, and integrated practice, embedding compliance directly into the technical stack.

Research in Diversity, Equity, and Inclusion suggests that individuals may hesitate to apply for jobs if they do not meet all the listed criteria. At Bitso, we value diversity and your unique strengths could be just what we're looking for. If this role excites you but you don't match every point in the description, we still want to hear from you.

#LI-Remote