ICT Risk & Incident Manager

About the role

Direct Crypto Limited, a newly established entity at an advanced stage of applying for a MiCA-regulated Crypto Asset Service Provider (CASP) license and part of the Wirex Holdings Ltd group, is looking for an ICT Risk & Incident Manager for its Engineering & Infrastructure team in Cyprus. You will be the first line of defence for ICT risk at entity level, working closely with the Global ICT Risk Manager and Group teams, and coordinating the local response to significant ICT incidents and regulatory reporting.

Key responsibilities

• Own and coordinate day-to-day ICT risk management, maintain the risk register and track remediation, escalating overdue or material risks
• Coordinate ICT risk assessments and support risk acceptance and exception processes
• Support Group ICT risk policies, standards and procedures, and keep governance documentation audit-ready
• Support compliance with ICT and operational resilience requirements (MiCA, DORA, CySEC) and coordinate remediation of regulatory findings
• Support the entity-level incident management process, classify and escalate significant incidents, and track remediation and root cause analysis
• Assess incidents against regulatory reporting thresholds and support regulatory incident reporting with Compliance and the Global ICT Risk Manager
• Act as the primary ICT risk point of contact locally, align with Group methodologies and escalate significant issues

Required profile

• Based in Cyprus, with professional written and spoken Greek and English
• Experience in ICT risk, technology risk, information security, operational risk or technology compliance
• Solid understanding of ICT risk frameworks, controls and risk registers, and practical knowledge of incident management
• Ability to work independently, manage multiple priorities and communicate clearly with technical and non-technical stakeholders

Nice to have

• Familiarity with MiCA and DORA, and knowledge of CySEC expectations
• Experience with ISO/IEC 27001, PCI DSS, NIST or similar frameworks, or third-party risk and vendor due diligence
• Experience in financial services, fintech, payments or crypto
• Certifications such as CRISC, CISM or CISA are desirable but not required

What we offer

• Flexible working hours with hybrid working options
• Annual training allowance and professional development support
• Financial support towards relevant professional certifications
• The chance to help build an entity from the ground up and career growth within a regulated FinTech group