Information Security Officer

About the role

Worldline, a major international player in commercial acquiring, multichannel payment acceptance and payment terminal solutions, is looking for an Information Security Officer. The role strengthens and maintains effective IT and business security practices across all Business Units in a highly sensitive and regulated environment. It acts as the main point of contact for the Business Units on security matters, guiding, overseeing and supporting the identification, assessment and management of security threats, working closely with business, technical and compliance stakeholders.

Key responsibilities

• Act as the accountable point of contact for all security-related topics, including security requirements and decision support.
• Design and implement security solutions aligned with internal and external stakeholder directives.
• Develop and enforce security best practices, including patch management and obsolescence processes.
• Manage and coordinate with third-party suppliers to ensure compliance with security standards.
• Streamline security processes and embed security measures in the design and implementation phases of business projects.
• Take part in operational committees and oversee the implementation of mitigation actions from the Risk Treatment Plan.
• Handle security incident response, including analysis and remediation of breaches.
• Collaborate on customer-initiated security certification audits and assessments.

Required profile

• Bachelor's degree in IT, IT Security, Engineering or equivalent.
• Minimum 5 years of experience in IT security or a relevant field.
• Proven experience in complex environments.
• Excellent communication and presentation skills in English, written and spoken; good level of German is mandatory.
• Results-driven, persistent, multicultural mindset and ability to work in an international environment.

Required skills

• Certificate in security (e.g. CISSP, CEH) is a strong plus.
• Google Cloud security and DevOps knowledge is a strong plus.
• Knowledge of PCI DSS, ISO 27001 and DORA security frameworks is a strong plus.