ICT risk manager

We are a Crypto Asset Service Provider (CASP) in the process of MiCA authorization and registered in the Czech Republic.

Our core services include On-Ramp solutions (conversion of fiat currencies, such as EUR, into cryptocurrency) and Off-Ramp solutions (conversion of cryptocurrency into fiat currencies for withdrawal to bank accounts or payment cards), provided to both individual and institutional clients.

In addition, we operate an OTC desk specializing in high-volume crypto-fiat settlements (EUR, USDT, BTC) for businesses across sectors including fintech, investment platforms, payment processors, and international B2B operations. As part of our continued expansion, we are seeking a qualified specialist to join our team.

Company: protoncrypto.pro

Company: CASP (in process of MiCA authorization)

Industry: On/Off-Ramp, OTC Desk

What awaits you?

o responsibility for the information security management system, its maintenance and development

o informing about the status of information security, identified risks and resolved serious security incidents

o Continuous analysis and evaluation of identified information risks, detected security events and revealed security incidents, including proposals for mitigating unacceptable risks and changing the prioritization of security projects and security measures

o determining the scope and boundaries of the ICT risk management framework (with respect to assets and organizational security)

o determination of methodologies for identifying and evaluating assets and methodologies for creating risk analysis

about establishing a risk management plan

o determining the scope of business continuity and regular testing of business continuity plans and response and recovery plans

o establishing operational rules and procedures within the framework of information security

o providing advice on the selection, implementation and management of security tools
and technologies (eg antivirus, encryption, firewalls)

o conducting analyzes of the impact of projects and changes on information security and the ICT environment

o evaluating security events and incidents and participating in resolving security incidents

o cooperation to ensure information security when creating, evaluating, selecting, managing and terminating supplier relationships in the field of ICT

o Ensuring the update of safety documentation, risk analysis and risk management plan

o Ensuring identification and updating of primary and supporting assets

o Ensuring regular ICT risk assessments

o conducting checks on the security measures implemented for the services provided

o checking the elimination of identified deficiencies at suppliers (if the contractual relationship allows this)

o cooperation in conducting control audits by the supervisory authority

other activities according to internal regulations

What knowledge and skills should you have?

- Secondary school completed with a school-leaving examination

- Expert knowledge of IT technologies, blockchain technology
and other technologies in relation to crypto assets

- knowledge of ISO, DORA security frameworks

at least 1 year of experience in the field of ICT risk/IT security/ICT audit/operational resilience management/CISA/CISM/CRISC/CEH/CISSP certification

What can we offer you?

Personal and professional growth through self-leadership and continuous development.

Opportunity to combine work with other activities, or option to have a full shift.

Support in developing professional skills.

An open and collaborative culture that encourages cross-functional teamwork and provides networking opportunities.

A supportive and inclusive environment that promotes a balanced and sustainable work-life, with flexible working conditions when suitable for the role.

Half shift (4 hours per working day)

Hybrid (office / home office)

Salaries: 30,000 – 40,000 CZK