Chief Information Security Officer

Reports ToChief Executive Officer with appropriate independent access to Authorised Management and the Supervisory Board. About Paytm EuropeMerchants deserve better from their payments provider: fairer pricing, faster settlement, easier tools, and support from a partner that understands their business. Paytm Europe Payments S.
A. is a CSSF-authorised Payment Institution in Luxembourg, backed by One97 Communications Limited, one of India's largest fintech groups, with the ambition of transforming how SMEs across Europe accept and manage payments. Following launch in Luxembourg, the business will expand into other major European markets. We are building the team and organisation from the ground up, creating an opportunity for people who want to take ownership and help shape how we work. Role PurposeThe Chief Information Security Officer (CISO) will establish and lead Paytm Europe’s information and cyber security capability as we launch and scale our European payments business. Working closely with Technology, Risk, Compliance and Paytm’s global teams, you will ensure our platforms, infrastructure, data and third-party technology ecosystem are secure, resilient and compliant with European regulatory requirements. This is a hands-on role: you will build the security framework as well as ensure it works in practice.

Key Responsibilities
Information & Cyber Security
· Develop and maintain Paytm Europe’s information security strategy, policies, standards and controls.
· Identify, assess and manage cyber and information-security risks.
· Oversee security architecture, vulnerability management, access controls, monitoring and incident response.
· Establish effective security reporting, metrics and escalation. DORA & Regulatory Resilience
· Support compliance with DORA and applicable CSSF ICT and security requirements.
· Develop and maintain ICT security, incident management, testing and resilience capabilities.
· Support regulatory reporting, audits, inspections and security assessments. Technology & Product Security
· Embed security into product development and technology change.
· Review new products, architectures and material technology changes from a security perspective.
· Work with Technology teams to ensure secure-by-design development and deployment. Third-Party Security
· Assess and monitor the security of critical technology and ICT service providers.
· Support technology due diligence, contracting and ongoing third-party risk management.
· Work with Paytm group teams while ensuring Paytm Europe maintains appropriate local oversight and accountability. Security Operations & Incident Management
· Establish effective detection, response and escalation processes.
· Coordinate the response to material cyber and information-security incidents.
· Ensure lessons from incidents and testing translate into stronger controls. Build the Function
· Define the security capabilities, tools and resources required as Paytm Europe grows.
· Manage specialist external security providers where appropriate.
· Build security awareness across the organisation. Ideal BackgroundYou will ideally have held a senior information or cyber security role within payments, banking, fintech or another regulated technology environment, with experience operating in a complex technology and third-party ecosystem. You should combine deep security expertise with the ability to communicate risk clearly to executives and Boards. Essential Experience
· Significant information and cyber security experience in a regulated environment.
· Strong understanding of security architecture, cyber risk and operational resilience.
· Experience establishing and operating information-security frameworks and controls.
· Knowledge of DORA and the European financial-services regulatory environment.
· Experience managing security incidents and technology risk.
· Strong third-party and cloud security experience.
· Ability to communicate effectively with senior management, Boards, regulators and technical teams.
· Excellent English; additional European languages are desirable. Highly Desirable
· Payments, acquiring or fintech experience.
· Experience with PCI DSS and payment-security standards.
· Relevant security qualifications such as CISSP, CISM or equivalent.
· Experience working with AWS and modern cloud-native environments.
· Experience building a security function in a growing organisation. Personal AttributesPragmatic, technically credible and highly accountable, with the judgement to distinguish genuine security risks from theoretical ones. Comfortable challenging decisions when necessary while remaining commercially minded, collaborative and focused on finding solutions. Measures of Success (First 12 Months)
· Establish a robust information and cyber security framework.
· Deliver security readiness for commercial launch and ongoing DORA compliance.
· Embed security into product development and technology change.
· Establish effective cyber monitoring, incident response and resilience testing.
· Implement strong oversight of critical ICT and technology providers.
· Build a security capability that can scale with European expansion. Why This Role MattersPayments businesses depend on trust. The CISO will protect Paytm Europe’s customers, data and technology while ensuring security enables rather than slows our growth. As an early senior hire, you will have the opportunity to shape our security architecture and culture from the outset rather than inherit a legacy environment.

How to Apply
Please send a CV and covering letter to: hiring@paytm.eu