Chief Information Security Officer - EU

Chief Information Security Officer (f/m/d) - BitGo Europe

Location: Germany - on-site in Frankfurt Office

The Chief Information Security Officer will be responsible for establishing the security strategy and direction for BitGo EU. As our top information security leader, you will have the opportunity to drive and implement the security strategy at the industry leader in BitGo for securing digital assets. Demonstrating your vision, domain expertise, and strong leadership skills, you will help shape the next generation of products and services while upholding the continued trust our clients have placed with us to ensure their assets are secure.

We are looking for relevant, collaborative leadership experience, proven execution ability, and technical cybersecurity competency as key indicators of success for this role. Working closely with the rest of our engineering teams, you and your team will share responsibilities to ensure that BitGo is able to continue to safely and securely ship highly scalable products as quickly and frictionlessly as feasible. You will design and work across teams to implement a program to protect our customer and company information, and secure our IT infrastructure. You will champion and preserve a balanced culture of security awareness by supporting and enabling risk analysis and strong security practices throughout the company. You will provide leadership in maintaining BitGos security policies, standards, and practices for the entire company and ensure that BitGo is in compliance with all applicable laws, regulations, and policies regarding the securing of information. You will drive implementation of security plans, including incident response, and lead the operational processes for monitoring and maintaining security and relevant compliance.

Responsibilities

• Serve as the designated Chief Information Security Officer (CISO) for BitGo Europe GmbH, fulfilling all regulatory obligations under BaFin, DORA, and MiCA requirements.
• Develop, implement, and maintain the information security management system (ISMS) in accordance with ISO 27001 and applicable EU regulatory standards.
• Lead the identification, assessment, and treatment of ICT and information security risks across the European entity, in alignment with DORA's ICT risk management framework.
• Act as the primary point of contact with BaFin and other EU regulatory bodies on all information security matters, audits, and supervisory inquiries.
• Own and oversee the incident response and ICT-related incident reporting processes, ensuring timely notification to regulators as required under DORA.
• Define and enforce security policies, standards, and controls covering network security, access management, cryptographic asset protection, and operational resilience.
• Conduct and coordinate regular security assessments, penetration tests, vulnerability management, and third-party ICT risk reviews.
• Collaborate with Group-level security and compliance teams to align European security posture with global BitGo standards while meeting local regulatory requirements.
• Provide security awareness training and foster a security-first culture across the Frankfurt office and European operations.
• Report regularly to senior management and the Management Board on the state of information security, open risks, and remediation progress.

Requirements

• 6 to 10 years of experience in information security, with at least 3 years in a senior or lead CISO role within a regulated financial services or fintech environment.
• Deep knowledge of BaFin regulatory requirements, DORA (Digital Operational Resilience Act), and MiCA, with hands-on experience implementing controls to meet these frameworks.
• Proven experience managing or operating under ISO 27001-certified ISMS; CISM, CISSP, or equivalent certification strongly preferred.
• Strong understanding of ICT risk management, third-party risk, and operational resilience requirements as defined under DORA.
• Experience interfacing directly with financial regulators (BaFin or equivalent EU national competent authority) on security matters.
• Familiarity with digital asset infrastructure, custody technology, and the unique security considerations of blockchain-based systems is a strong advantage.
• Excellent written and verbal communication skills in both English and German; ability to produce regulatory-quality documentation and board-level reporting.
• Demonstrated ability to build and lead cross-functional security initiatives in a fast-paced, international organization.
• Strong analytical and risk-based thinking; able to balance regulatory compliance with pragmatic, business-enabling security design.
• Based in or willing to relocate to Frankfurt; this is an on-site role with limited home-office agreement possible.

Why Join BitGo?

Disrupting an industry takes vision, innovation, passion, technical chops, drive to deliver, collaboration, and execution. Join a team of great people who strive for excellence and personify our corporate values of ownership, craftsmanship, and open communication. We are looking for new colleagues who bring innovative ways of thinking and problem solving, and who want risks to be part of the team that changes the worlds financial markets.

Here are some of the benefits* of working at BitGo:

• Competitive base salary, bonus and stock options
• Access to global, group wide experts in the crypto industry
• Free custom lunches, dinners and snacks
• Computer equipment and workplace furniture to suit your needs
• Great colleagues and inspiring environment

*Benefits may vary based on location

Cryptocurrencies are the most disruptive change the financial services industry has seen in years. Join us and youll be able to look back and say you were part of the team that transformed investing.