Information Security Specialist (Crypto)

About the role

Revolut’s Information Security team is looking for a specialist to lead the second line of defence for crypto‑related products. The role combines deep technical expertise with a risk‑based mindset to protect systems, data and customers across our global platform.

Key responsibilities

• Conduct regular ICT security risk assessments and evaluate controls, including cyber‑risk for custodian and self‑custody wallets.
• Review new crypto initiatives and monitor crypto service providers for security compliance.
• Challenge and monitor group‑level security controls (AppSec, testing, incident response) to meet local regulatory requirements.
• Oversee third‑party security, outsourcing chains and crypto service providers.
• Review penetration testing results, vulnerability scans and resilience frameworks such as BCP, DR and failover.
• Assess, classify and resolve security incidents and threats, handling regulatory reporting obligations.
• Coordinate audits, inspections and assurance activities with internal and external stakeholders.
• Drive adoption of group InfoSec policies locally and promote a security‑first culture.
• Contribute to digital operational resilience testing aligned with DORA and provide regular security reporting to management and regulators.

Required profile

• Senior experience in InfoSec and IT operations, preferably in a 2nd‑line defence role.
• Background working with crypto‑asset service providers or financial institutions handling digital assets.
• Proven ability to manage intra‑group outsourcing of InfoSec and IT services in regulated environments.
• Track record of implementing group IT/InfoSec policies to satisfy regulations such as DORA, MICA and PSD2.

Required skills

• Penetration testing
• Vulnerability scanning
• Crypto wallet security assessment
• Security incident response and reporting
• Regulatory compliance (DORA, MICA, PSD2)
• Third‑party security assessment