Head of Information Security

Job description

**About Unlimit** Unlimit is a global fintech ecosystem built to eliminate financial borders holding businesses back. The company provides the extensive infrastructure needed to scale globally, integrating payment processing, multi-currency business accounts, BaaS and crypto gateways into a single, intelligent platform. Across 17 offices globally, Unlimit bridges hyper-local expertise with a high-capacity financial network, giving companies the agility to expand across regions with operational confidence and speed. Driving the evolution of payments, Unlimit is transforming its infrastructure from human-operated fintech into AI-native financial infrastructure — where APIs are consumed by machines, integrations are negotiated by agents, and systems evolve continuously through intelligent automation. Our next users are not only humans. They are AI agents acting on behalf of humans and businesses. Unlimit serves more than the needs of businesses today; we are building the nervous system for a borderless global economy. As we continue to expand across regulated markets worldwide, we’re looking for a **Head of Information Security** to lead our global Governance, Risk & Compliance (GRC) function. Reporting directly to the CISO, you’ll define and scale Unlimit’s global security governance framework, ensuring compliance with international standards and financial regulations while driving automation, standardisation, and operational excellence across multiple jurisdictions. As Head of Information Security, you will own and evolve Unlimit’s global Information Security GRC strategy across a complex, highly regulated environment. You’ll lead a small but high-impact team, working closely with Engineering, Compliance, Legal, Privacy, Risk, Internal Audit, and business stakeholders to strengthen our security governance, simplify compliance, and enable secure business growth. A key part of the role will be transforming traditional GRC processes through automation, leveraging modern platforms such as Vanta and agentic AI solutions to build scalable, efficient, and globally consistent security operations. ### Key Responsibilities - Develop and enhance the Information Security Management System (ISMS). - Lead the GRC function and manage the Information Security team. - Drive information security governance across the organization. - Lead and support international audits, including ISO 27001, PCI DSS, and other regulatory assessments. - Own Risk Management, Third-Party/Vendor Risk Management, and Security Awareness initiatives. - Ensure compliance with international standards and regulations, including ISO 27001, PCI DSS, DORA, and GDPR. - Improve and automate GRC processes using modern platforms and AI-driven solutions. ### What We're Looking For - 7+ years of experience in Information Security, including at least 2 years in a leadership role. - Strong expertise in GRC, ISMS, risk management, and security compliance. - Hands-on experience with ISO 27001 and PCI DSS audits. - Previous experience in fintech, banking, payments, or crypto is highly preferred. - Experience leading teams and working closely with business stakeholders, auditors, and regulators. ### What We Offer - The opportunity to influence the information security strategy of a global fintech company. - A modern technology environment with a strong focus on automation and AI adoption. - Relocation support to Belgrade, Serbia. - Competitive compensation, annual performance bonus, and a comprehensive benefits package.