TodaPay

Accountant
Finance Department — Toda Pay
Full-time | Remote / Hybrid | Reports to CFO
 

About Toda Pay
Toda Pay is an international fintech company operating in the digital payments and financial infrastructure space across multiple jurisdictions. We support high-growth payment operations with multi-currency transactions, crypto payments, and complex corporate structures.
We are looking for a detail-oriented and proactive Accountant to join our Finance team and support core accounting operations, financial reporting, payroll processing, and coordination with external accountants and auditors across jurisdictions.
 

Position Overview
The Accountant will be responsible for executing core accounting and finance operations including payroll management, vendor invoice processing, reconciliations, month-end close, budgeting support, regulatory compliance, and audit coordination.
This role requires strong attention to detail, ability to work with multi-currency and crypto transactions, and experience operating in a fast-paced fintech environment with multiple legal entities.
 

Key Responsibilities

• Payroll Management
• Process monthly payroll for 50+ contractors across multiple currencies (EUR, USD, GBP, crypto)
• Extract payroll data from HRIS systems (PeopleForce) and prepare payroll registers
• Calculate multi-currency conversions using approved FX rates
• Process crypto payroll payments (wallet validation, network selection, fee calculations)
• Coordinate with Treasury for payroll execution
• Prepare payroll variance analysis (budget vs actual)
• Experience working with high-risk industries (including crypto / fintech / gambling / etc.)
   

Accounts Payable & Vendor Management

• Review and validate vendor invoices against contracts and purchase orders
• Reconcile provider fees using invoices and system/API data exports
• Identify discrepancies and coordinate resolution with providers
• Obtain CFO approvals and submit invoices for payment scheduling
• Maintain vendor master data in accounting systems

Month-End Close & Financial Reporting

• Perform bank and wallet reconciliations
• Record accruals for unpaid invoices, salaries, and expenses
• Prepare adjusting journal entries
• Support CFO in preparation of P&L, Balance Sheet, and Cash Flow statements
• Ensure month-end close completion by the 5th of the following month
• Prepare supporting schedules and management reporting analysis

Budgeting & Planning Support

• Support CFO in annual budgeting process
• Collect budget inputs from department heads
• Consolidate departmental budgets into company-wide financial model
• Prepare monthly budget vs actual analysis
• Investigate and document variances exceeding thresholds (>10%)
• Track budget reallocations and maintain audit trail

External Accountants & Auditors Coordination

• Act as primary liaison with external accounting firms across jurisdictions
• Provide monthly financial data for statutory reporting
• Review statutory accounts prepared by external accountants
• Coordinate annual audit process
• Prepare audit schedules and supporting documentation (PBC lists)
• Respond to auditor requests and track audit recommendations

Regulatory Compliance & Statutory Filings

• Ensure compliance with local GAAP / IFRS standards
• Prepare or coordinate VAT/GST filings
• Coordinate corporate tax submissions across jurisdictions
• File annual accounts with local registrars (Companies House, etc.)
• Prepare transfer pricing documentation where required
• Monitor regulatory deadlines and maintain compliance calendar

Intercompany Transactions

• Record intercompany loans, fees, and settlements
• Perform intercompany reconciliations
• Prepare elimination entries for consolidated financial statements

Process Improvement & Documentation

• Identify automation opportunities in accounting processes
• Document standard operating procedures (SOPs)
• Maintain proper documentation for all transactions
• Collaborate with Finance team on system improvements

Requirements
Education & Experience

• Bachelor’s degree in Accounting, Finance, or related field
• 4–6 years of accounting experience (fintech or payments industry preferred)
• Professional certification (ACCA, CPA, or equivalent) is a plus

Technical Skills

• Strong knowledge of accounting principles (IFRS / GAAP)
• Experience with statutory reporting and regulatory compliance
• Understanding of VAT/GST and corporate taxation
• Advanced Excel skills
• Experience with accounting software (QuickBooks, Xero, NetSuite, or similar)
• Multi-currency accounting experience
• Understanding of cryptocurrency transactions is a plus
• Experience with HRIS systems (PeopleForce, BambooHR, etc.)
• Experience working with external auditors and accountants

Soft Skills

• Exceptional attention to detail and accuracy
• Strong organizational and time management skills
• Ability to manage multiple deadlines across jurisdictions
• Excellent communication skills
• Proactive problem-solving mindset
• Ability to work in a fast-paced environment

Language Requirements

• Fluent English (written and spoken)
• Russian / Ukrainian / Spanish — a plus

What We Offer

• Opportunity to work in a fast-growing international fintech company
• Exposure to multi-jurisdiction financial operations
• Remote / hybrid flexibility
• Professional growth opportunities
• Collaborative team culture

1. Purpose of the Request

We request approval to hire a Reconciliation Specialist to support daily and monthly reconciliation processes across acquiring and payout operations within a crypto-fiat payment processing environment. The role is required to strengthen financial control, improve reconciliation accuracy, reduce operational risks, and ensure timely financial reporting for merchants, providers, Treasury, KAM, Business Development, and management teams.

2. Business Justification

• The volume of provider-merchant reconciliation streams requires dedicated operational ownership and timely daily control.
• The company needs consistent verification of provider reports, internal processing data, merchant balances, fees, refunds, chargebacks, rolling reserves, and payout settlements.
• Accurate reconciliation is critical for financial transparency, liquidity planning, margin control, and merchant reporting.
• Hiring this role will reduce dependency on senior finance resources for routine reconciliation tasks and allow the Head of Reconciliation / CFO to focus on controls, models, automation, and strategic finance topics.
• The position will help identify recurring discrepancies, improve documentation, and support further automation of reconciliation workflows.

3. Role Summary

The Reconciliation Specialist will be responsible for performing reconciliation of transaction data, settlement calculations, provider reports, merchant balances, fees, rolling reserves, refunds, chargebacks, and payouts. The employee will work closely with Finance, Treasury, KAM, Business Development, and Operations teams to ensure accurate financial data and stable financial flows between payment providers, merchants, and internal systems.

4. Key Responsibilities

• Perform regular reconciliation of transactions across payment providers, merchants, and internal processing platforms.
• Reconcile acquiring and payout flows, including turnover, fees, settlements, refunds, chargebacks, and rolling reserves.
• Compare provider reports with internal system data and identify discrepancies.
• Investigate and resolve reconciliation differences in cooperation with relevant teams.
• Support settlement calculations and verify payable amounts based on commercial terms, fees, FX rates, and settlement periods.
• Monitor merchant and provider balances, settlements, payouts, deductions, and adjustments.
• Track rolling reserve accruals, releases, adjustments, crypto conversions, and wallet transfers where applicable.
• Prepare financial data for monthly and annual merchant reports.
• Support Treasury with validation of provider balances and settlement schedules.
• Provide financial data, margin calculations, fee checks, and ad hoc reports for KAM, Business Development, and management.
• Maintain clear documentation of reconciliation logic, workflows, data sources, and recurring issues.
• Support process improvement and automation initiatives for reconciliation files, reports, and calculation templates.

5. Candidate Requirements

• 1-3+ years of experience in financial reconciliation, settlement operations, payment operations, treasury support, accounting, or finance operations.
• Experience in fintech, payment processing, acquiring, e-commerce, or crypto payments is preferred.
• Understanding of transaction flows, settlements, fees, refunds, chargebacks, balances, and rolling reserves.
• Strong Excel / Google Sheets skills, including formulas, pivot tables, lookups, and reconciliation files.
• Ability to work with large datasets and identify discrepancies.
• Experience with multi-currency transactions and FX calculations.
• High attention to detail, numerical accuracy, analytical thinking, and structured task management.
• Good communication skills and ability to cooperate with Finance, Treasury, KAM, Business Development, and Operations teams.
• Experience with Corefy or similar processing platforms, BI tools, APIs, or automated reporting tools will be an advantage.

6. Selection Criteria

• Strong practical Excel / Google Sheets skills and ability to pass a reconciliation test task.
• Ability to explain discrepancies clearly and propose next steps for resolution.
• Understanding of payment settlement logic, fees, reserves, refunds, chargebacks, and FX impact.
• Accuracy, responsibility, and ability to work with repetitive but high-risk financial tasks.

Comfortable working in a fast-paced fintech environment with urgent operational 

Toda Pay is an international fintech company operating in the digital payments and financial infrastructure space across multiple jurisdictions. We support high-growth payment operations with multi-currency transactions, crypto payments, and complex corporate structures.

We're looking for a Digital Project Manager (DPM) to own the full lifecycle of our web projects — from the initial brief, through coordinating external developers, to keeping live sites and the surrounding digital infrastructure running smoothly.

You'll sit at the intersection of project management and digital administration: the single point of contact for our development partners, and the owner of the documentation and processes that keep everything organized as the business grows.

Note: This is not a developer position. You won't write code, build integrations, or manage servers — those sit with our technical team. Your strength is coordination, ownership, and keeping things organized and accountable.
 

Responsibilities:
 

Web projects & delivery

• Scope and brief new web projects, and act as the single point of contact with external development partners.
• Track timelines, coordinate stakeholders, and escalate blockers without getting into the technical work itself.
• Safeguard access and credentials throughout each project, and manage a clean handover at launch.
• Run acceptance testing on content, UI, and core functionality before go-live.
   

Site support & maintenance

• Make content updates through the CMS / admin panel (copy, images, localizations, banners).
• Keep site content and catalogs accurate and up to date.
• Triage and resolve day-to-day issues; escalate technical incidents to the development team with clear context, screenshots, and priority.
   

Digital infrastructure

• Keep domains, hosting, SSL, mailboxes, and third-party services organized, current, and renewed on time.
• Maintain accurate records of accounts, services, and renewal dates.
• Set up and maintain simple automations and integrations (e.g. email forwarding, notifications) where they save the team time.

Documentation & process

• Maintain clear, centralized documentation and SOPs so processes are repeatable and nothing lives only in one person's head.
• Keep everything structured so the team can scale without operational friction.
   

Compliance support

• Provide website traffic and analytics reports on request.
• Help keep cookie consent and privacy/legal pages in place and current.
• Flag notable site changes or traffic anomalies to the relevant owner.
   

Requirements 

• Experience in project management or digital project coordination.
• A track record working with external developers or agencies as the client-side point of contact.
• Comfort with CMS platforms and a working understanding of domains, hosting, DNS, and web analytics (e.g. GA4).
• Strong documentation and organizational discipline.
• Familiarity with UAT and basic QA practices.
• A proactive, detail-oriented, ownership mindset.
• Fluent written and spoken English. 
   

Nice to have

• An existing network of developers, agencies, and other service providers you can tap into.
• Hands-on experience with automation and AI tools — a strong plus.
• Background in a regulated or fast-moving industry, preferably fintech.
• Familiarity with privacy and cookie-consent basics (e.g. GDPR).
• Experience with no-code automation tools.
   

What we offer
• Opportunity to work in a fast-growing international fintech company
• Professional growth opportunities alongside with company
• 24 paid vacation days per year and 5 paid sick leave days per year
• 10 Public holidays days
• An opportunity to work full remote or hybrid flexibility
• Collaborative and friendly team
• Professional education budget after 6 months working in the company
• Birthday gift bonus for all our employees

 

TodaPay is an international fintech company in digital payments and financial infrastructure across multiple jurisdictions. We support high-growth payment operations with multi-currency transactions, crypto payments, and complex corporate structures.

Reconciliation Specialist will be supporting daily and monthly reconciliation processes across acquiring and payout operations within a crypto-fiat payment processing environment. The role is required to strengthen financial control, improve reconciliation accuracy, reduce operational risks, and ensure timely financial reporting for merchants, providers, Treasury, KAM, Business
Development, and management teams.

The Reconciliation Specialist will be responsible for performing reconciliation of transaction data, settlement calculations, provider reports, merchant balances, fees, rolling reserves, refunds, chargebacks, and payouts. The employee will work closely with Finance, Treasury, KAM, Business Development, and Operations teams to ensure accurate financial data and stable financial flows between payment providers, merchants, and internal systems.

Key Responsibilities:

• Reconcile acquiring and payout flows, including turnover, fees, settlements, refunds, chargebacks, and rolling reserves.
• Compare provider reports with internal system data and identify discrepancies.
• Investigate and resolve reconciliation differences with relevant teams.
• Support settlement calculations and verify payable amounts based on commercial terms, fees, FX rates, and settlement periods.
• Monitor merchant and provider balances, settlements, payouts, deductions, and adjustments.
• Track rolling reserve accruals, releases, adjustments, crypto conversions, and wallet transfers when applicable.
• Prepare financial data for monthly and annual merchant reports.
• Support Treasury by validating provider balances and settlement schedules.
• Provide financial data, margin calculations, fee checks, and ad hoc reports for KAM, Business Development, and management.
• Maintain clear documentation of reconciliation logic, workflows, data sources, and recurring issues.

• Support process improvement and automation initiatives for reconciliation files, reports, and calculation templates.

  
  Requirements:

• Experience in fintech, payment processing, acquiring, e-commerce, or crypto payments preferred.
• 3+ years of experience in financial reconciliation, settlement operations, payment operations, treasury support, accounting, or finance operations.
• Understanding of transaction flows, settlements, fees, refunds, chargebacks, balances, and rolling reserves.
• Strong Excel / Google Sheets skills, including formulas, pivot tables, lookups, and reconciliation files.
• Ability to work with large datasets and identify discrepancies.
• Experience with multi-currency transactions and FX calculations.
• High attention to detail, numerical accuracy, analytical thinking, and structured task management.
• Good communication skills and ability to collaborate with Finance, Treasury, KAM, Business Development, and Operations teams.
• Experience with Corefy or similar processing platforms, BI tools, APIs, or automated reporting tools is an advantage.
• Strong practical Excel / Google Sheets skills and ability to pass a reconciliation test.
• Ability to explain discrepancies clearly and propose resolution steps.
• Understanding of payment settlement logic, fees, reserves, refunds, chargebacks, and FX impact.
• Accuracy, responsibility, and ability to handle repetitive but high-risk financial tasks.
• Comfortable working in a fast-paced fintech environment with urgent operational requests.
  
  We offer
• Opportunity to work in a fast-growing international fintech company
• Professional growth opportunities alongside with company
• 24 paid vacation days per year and 5 paid sick leave days per year
• 10 Public holidays days
• An opportunity to work full remote or hybrid flexibility
• Collaborative and friendly team
• Professional education budget after 6 months working in the company
• Birthday gift bonus for all our employees

TodaPay is an international fintech company operating in the digital payments and financial infrastructure space across multiple jurisdictions. We support high-growth payment operations with multi-currency transactions, crypto payments, and complex corporate structures.
We are looking for a detail-oriented and proactive Accountant to join our Finance team and support core accounting operations, financial reporting, payroll processing, and coordination with external accountants and auditors across jurisdictions.

The Chief Information Security Officer (CISO) is the C-suite executive accountable for
information security, cyber resilience, and corporate IT operations across the group. Operating
in a regulated, multi-jurisdictional PSP and fintech environment spanning card acquiring &
gateway, card issuing / BaaS, and crypto / Web3 payment rails, the CISO defines and executes
the enterprise security strategy, safeguards cardholder data, customer funds, private keys, and
proprietary platforms, and ensures continuous compliance with PCI DSS, PSD2/SCA, GDPR,
DORA, NIS2, MiCA, SOC 2, ISO 27001, FCA/EBA expectations, and equivalent requirements in
other operating jurisdictions. In addition to leading security, the CISO owns corporate IT
— internal infrastructure, endpoints, identity, productivity tooling, and IT service delivery -and
drives its modernization in lockstep with business growth.

Key Responsibilities:
Security Strategy & Governance
• Define, own, and execute the multi-year information security and cyber resilience
strategy aligned with business growth, product roadmap, and regulatory obligations.
• Establish and maintain the Information Security Management System (ISMS) based on
ISO 27001, NIST CSF, and PCI DSS control frameworks.
• Report security posture, risks, incidents, and investment needs to the CEO, Executive
Committee, and Board on a regular cadence.
• Set and enforce enterprise security policies, standards, and acceptable use across all
business units.

Regulatory Compliance & Risk Management
• Maintain continuous compliance with PCI DSS Level 1, PSD2/SCA, GDPR, DORA,
NIS2, MiCA (for crypto activity), SOC 1/SOC 2 Type II, ISO 27001/27017/27018, and
EBA/FCA guidelines, plus equivalent obligations in other operating jurisdictions.
• Own the security risk register, third-party / vendor risk program, and risk treatment plans;
ensure alignment with enterprise risk management and the CRO.
• Lead external and internal audits, QSA assessments, penetration tests, and regulatory
examinations; remediate findings within agreed timelines.
• Oversee data protection program in coordination with the DPO, including DPIAs, data
residency, cross-border transfers, and breach notification procedures.

Cybersecurity Operations & Engineering
• Operate a 24/7 Security Operations Center (SOC) covering threat detection, monitoring, incident response, digital forensics, and threat intelligence across acquiring, issuing, and crypto rails.
• Lead the response to security incidents, payment fraud events, account-takeover, and data breaches; act as the primary executive interface with regulators (FCA, EBA,national CAs), card schemes, acquirers, and law enforcement during incidents.
• Mature vulnerability management, red/purple teaming, and threat hunting across multicloud (AWS/GCP/Azure), Kubernetes, on-prem, PCI cardholder data environments(CDE), and crypto custody/HSM enclaves.
• Drive Zero Trust architecture, network segmentation, cryptography/HSM/key management, tokenization, secrets management, and secure key ceremonies for cryptocustody. 

Cloud, DevSecOps & Product Security
• Embed Security-by-Design and Privacy-by-Design across the SDLC for payment gateways, issuing platforms, APIs, mobile/web apps, merchant/partner portals, and crypto wallets.
• Own a modern DevSecOps toolchain: SAST, DAST, SCA, secrets scanning, IaC scanning, container & K8s posture (CSPM/KSPM), and policy-as-code in CI/CD.
• Operate a cloud security program across AWS/GCP/Azure: landing zones, guardrails, workload identity, CNAPP, runtime protection, and continuous compliance.
• Partner with Engineering and Product to secure new payment products, BaaS/issuing APIs, open banking integrations, crypto on/off-ramp and custody, and AI/ML use cases.
• Champion fraud and financial-crime prevention with Risk, Fraud, and AML −3DS2, device fingerprinting, behavioral biometrics, transaction monitoring, sanctions screening, and Travel Rule for crypto flows.

Identity, Access & Insider Risk
• Own enterprise identity (SSO, MFA, PAM, IGA), least-privilege enforcement, joiner/mover/leaver processes, and privileged access to production and payment systems.
• Run an insider risk and data loss prevention (DLP) program covering cardholder data, PII, and sensitive financial information.
Business Continuity & Cyber Resilience
• Own cyber-resilience, DR, and business continuity planning for critical payment processing services, ensuring RTO/RPO meet regulatory and scheme requirements.
• Run regular tabletop exercises, ransomware simulations, and crisis-management drills with executive participation. Corporate IT Management & Modernization (Additional Responsibility)
• Own end-to-end Corporate IT: infrastructure, networking, end-user computing, collaboration suites ( Google Workspace), SaaS administration, telephony, and meeting rooms across all offices and a globally distributed remote workforce.
• Drive the Corporate IT modernization roadmap: cloud-first, SaaS-first, MDM/UEM, passwordless identity and convergence of corporate networking.
• Own IT asset and SaaS lifecycle management, software licensing, spend optimization (FinOps for SaaS), and IT vendor / contract management.
• Ensure secure, automated onboarding/offboarding for employees and contractors, including device provisioning, access entitlements (joiner/mover/leaver), and data recovery.
• Manage the Corporate IT budget, capacity planning, and operational efficiency; align corporate IT controls with security, privacy, and regulatory requirements (incl. DORA ICT scope).
• Support M&A integration of acquired entities’ IT estates -consolidating identity, endpoints, SaaS, and networking into the group standard.

People, Culture & Awareness
• Build, mentor, and retain a high-performing security and IT organization; define career paths, hiring plans, and succession.
• Run enterprise-wide security awareness, phishing simulations, and role-based training for engineers, operations, and customer-facing teams.
• Foster a strong security and service culture that treats security as a business enabler, not a blocker.

Budget & Vendor Management
• Own consolidated Security + Corporate IT budget (capex and opex); optimize spend across tooling, services, and headcount.
• Manage strategic relationships with security vendors, MSSPs, cloud providers, QSAs, auditors, and IT service partners.

Requirements:
• 7+ years in information security, with 5+ years in a CISO, Deputy CISO, or equivalent C-
suite role inside a PSP, acquirer, issuer/BaaS provider, card network, EMI, bank, or regulated fintech operating in EU or US.
• Demonstrated hands-on accountability for PCI DSS Level 1 (RoC), PSD2/SCA, GDPR, SOC 2 Type II, ISO 27001 programs; working knowledge of DORA, NIS2, and MiCA.
• Proven experience leading security across acquiring/gateway and card issuing or BaaS stacks; familiarity with crypto / Web3 payment rails and custody is required.
• Deep technical fluency in cloud security (AWS/GCP/Azure), Kubernetes, API security, DevSecOps toolchains, cryptography, HSM/KMS, tokenization, and Zero Trust.
• Track record of leading 24/7 SOC and incident response for material cyber, fraud, and payment incidents -including regulator, card-scheme, and partner-bank communications.
• Direct accountability for corporate IT operations at scale (service desk, endpoint, M365 /Google Workspace, identity, networking) and for leading an IT modernization program.
• Strong partnership track record with Fraud, AML, and Financial Crime teams -including transaction monitoring, sanctions, and Travel Rule implementation.
• Experience reporting to Boards, Risk & Audit Committees, regulators, and external auditors.
• Relevant certifications: CISSP, CISM, CISA, CRISC, CCSP, or equivalent.

Nice to Have:
• Experience with issuing/processing platforms (e.g., Marqeta, Galileo, Paymentology, in-house BIN-sponsored issuing) and acquiring stacks.
• Hands-on familiarity with crypto custody (MPC / HSM), stablecoin rails, on/off-ramp flows, and Travel Rule tooling (e.g., TRP, Notabene, Sumsub).
• Open Banking, embedded finance, and BaaS exposure.
• Experience scaling security and IT through rapid headcount growth, geographic expansion, and M&A integration.

We offer:
• Opportunity to work in a fast-growing international fintech company
• Professional growth opportunities alongside with company
• 24 paid vacation days per year and 5 paid sick leave days per year
• 10 Public holidays days
• An opportunity to work full remote or hybrid flexibility
• Collaborative and friendly team
• Professional education budget after 6 months working in the company
• Birthday gift bonus for all our employees

TodaPay is an international fintech company operating in the digital payments and financial infrastructure space across multiple jurisdictions. We support high-growth payment operations with multi-currency transactions, crypto payments, and complex corporate structures

The Chief Information Security Officer (CISO) is the C-suite executive accountable for information security, cyber resilience, and corporate IT operations across the group. Operating in a regulated, multi-jurisdictional PSP and fintech environment spanning card acquiring&gateway, card issuing / BaaS, and crypto / Web3 payment rails, the CISO defines and executes the enterprise security strategy, safeguards cardholder data, customer funds, private keys, and proprietary platforms, and ensures continuous compliance with PCI DSS, PSD2/SCA, GDPR,DORA, NIS2, MiCA, SOC 2, ISO 27001, FCA/EBA expectations, and equivalent requirements in other operating jurisdictions. In addition to leading security, the CISO owns corporate IT— internal infrastructure, endpoints, identity, productivity tooling, and IT service delivery -and
drives its modernization in lockstep with business growth.

Key Responsibilities:
Security Strategy & Governance
• Define, own, and execute the multi-year information security and cyber resilience strategy aligned with business growth, product roadmap, and regulatory obligations.
• Establish and maintain the Information Security Management System (ISMS) based on ISO 27001, NIST CSF, and PCI DSS control frameworks.
• Report security posture, risks, incidents, and investment needs to the CEO, Executive Committee, and Board on a regular cadence.
• Set and enforce enterprise security policies, standards, and acceptable use across all business units.

Regulatory Compliance & Risk Management
• Maintain continuous compliance with PCI DSS Level 1, PSD2/SCA, GDPR, DORA, NIS2, MiCA (for crypto activity), SOC 1/SOC 2 Type II, ISO 27001/27017/27018, and EBA/FCA guidelines, plus equivalent obligations in other operating jurisdictions.
• Own the security risk register, third-party / vendor risk program, and risk treatment plans; ensure alignment with enterprise risk management and the CRO.
• Lead external and internal audits, QSA assessments, penetration tests, and regulatory examinations; remediate findings within agreed timelines.
• Oversee data protection program in coordination with the DPO, including DPIAs, data residency, cross-border transfers, and breach notification procedures.

Cybersecurity Operations & Engineering
• Operate a 24/7 Security Operations Center (SOC) covering threat detection, monitoring, incident response, digital forensics, and threat intelligence across acquiring, issuing, and crypto rails.
• Lead the response to security incidents, payment fraud events, account-takeover, and data breaches; act as the primary executive interface with regulators (FCA, EBA,national CAs), card schemes, acquirers, and law enforcement during incidents.
• Mature vulnerability management, red/purple teaming, and threat hunting across multicloud (AWS/GCP/Azure), Kubernetes, on-prem, PCI cardholder data environments(CDE), and crypto custody/HSM enclaves.
• Drive Zero Trust architecture, network segmentation, cryptography/HSM/key management, tokenization, secrets management, and secure key ceremonies for cryptocustody. 

Cloud, DevSecOps & Product Security
• Embed Security-by-Design and Privacy-by-Design across the SDLC for payment gateways, issuing platforms, APIs, mobile/web apps, merchant/partner portals, and crypto wallets.
• Own a modern DevSecOps toolchain: SAST, DAST, SCA, secrets scanning, IaC scanning, container & K8s posture (CSPM/KSPM), and policy-as-code in CI/CD.
• Operate a cloud security program across AWS/GCP/Azure: landing zones, guardrails, workload identity, CNAPP, runtime protection, and continuous compliance.
• Partner with Engineering and Product to secure new payment products, BaaS/issuing APIs, open banking integrations, crypto on/off-ramp and custody, and AI/ML use cases.
• Champion fraud and financial-crime prevention with Risk, Fraud, and AML −3DS2, device fingerprinting, behavioral biometrics, transaction monitoring, sanctions screening, and Travel Rule for crypto flows.

Identity, Access & Insider Risk
• Own enterprise identity (SSO, MFA, PAM, IGA), least-privilege enforcement, joiner/mover/leaver processes, and privileged access to production and payment systems.
• Run an insider risk and data loss prevention (DLP) program covering cardholder data, PII, and sensitive financial information.
Business Continuity & Cyber Resilience
• Own cyber-resilience, DR, and business continuity planning for critical payment processing services, ensuring RTO/RPO meet regulatory and scheme requirements.
• Run regular tabletop exercises, ransomware simulations, and crisis-management drills with executive participation. Corporate IT Management & Modernization (Additional Responsibility)
• Own end-to-end Corporate IT: infrastructure, networking, end-user computing, collaboration suites ( Google Workspace), SaaS administration, telephony, and meeting rooms across all offices and a globally distributed remote workforce.
• Drive the Corporate IT modernization roadmap: cloud-first, SaaS-first, MDM/UEM, passwordless identity and convergence of corporate networking.
• Own IT asset and SaaS lifecycle management, software licensing, spend optimization (FinOps for SaaS), and IT vendor / contract management.
• Ensure secure, automated onboarding/offboarding for employees and contractors, including device provisioning, access entitlements (joiner/mover/leaver), and data recovery.
• Manage the Corporate IT budget, capacity planning, and operational efficiency; align corporate IT controls with security, privacy, and regulatory requirements (incl. DORA ICT scope).
• Support M&A integration of acquired entities’ IT estates -consolidating identity, endpoints, SaaS, and networking into the group standard.

People, Culture & Awareness
• Build, mentor, and retain a high-performing security and IT organization; define career paths, hiring plans, and succession.
• Run enterprise-wide security awareness, phishing simulations, and role-based training for engineers, operations, and customer-facing teams.
• Foster a strong security and service culture that treats security as a business enabler, not a blocker.

Budget & Vendor Management
• Own consolidated Security + Corporate IT budget (capex and opex); optimize spend across tooling, services, and headcount.
• Manage strategic relationships with security vendors, MSSPs, cloud providers, QSAs, auditors, and IT service partners.

Requirements:
• 7+ years in information security, with 5+ years in a CISO, Deputy CISO, or equivalent C-suite role inside a PSP, acquirer, issuer/BaaS provider, card network, EMI, bank, or regulated fintech operating in EU or US.
• Demonstrated hands-on accountability for PCI DSS Level 1 (RoC), PSD2/SCA, GDPR, SOC 2 Type II, ISO 27001 programs; working knowledge of DORA, NIS2, and MiCA.
• Proven experience leading security across acquiring/gateway and card issuing or BaaS stacks; familiarity with crypto / Web3 payment rails and custody is required.
• Deep technical fluency in cloud security (AWS/GCP/Azure), Kubernetes, API security, DevSecOps toolchains, cryptography, HSM/KMS, tokenization, and Zero Trust.
• Track record of leading 24/7 SOC and incident response for material cyber, fraud, and payment incidents -including regulator, card-scheme, and partner-bank communications.
• Direct accountability for corporate IT operations at scale (service desk, endpoint, M365 /Google Workspace, identity, networking) and for leading an IT modernization program.
• Strong partnership track record with Fraud, AML, and Financial Crime teams -including transaction monitoring, sanctions, and Travel Rule implementation.
• Experience reporting to Boards, Risk & Audit Committees, regulators, and external auditors.
• Relevant certifications: CISSP, CISM, CISA, CRISC, CCSP, or equivalent.

Nice to Have:
• Experience with issuing/processing platforms (e.g., Marqeta, Galileo, Paymentology, in-house BIN-sponsored issuing) and acquiring stacks.
• Hands-on familiarity with crypto custody (MPC / HSM), stablecoin rails, on/off-ramp flows, and Travel Rule tooling (e.g., TRP, Notabene, Sumsub).
• Open Banking, embedded finance, and BaaS exposure.
• Experience scaling security and IT through rapid headcount growth, geographic expansion, and M&A integration.

We offer:
• Opportunity to work in a fast-growing international fintech company
• Professional growth opportunities alongside with company
• 24 paid vacation days per year and 5 paid sick leave days per year
• 10 Public holidays days
• An opportunity to work full remote or hybrid flexibility
• Collaborative and friendly team
• Professional education budget after 6 months working in the company
• Birthday gift bonus for all our employees

TodaPay is an international fintech company operating in the digital payments and financial infrastructure space across multiple jurisdictions. We support high-growth payment operations with multi-currency transactions, crypto payments, and complex corporate structures.
 

We are seeking a hands-on System Administrator to keep our corporate IT environment running reliably and securely. In this role you will administer and support a mixed fleet of Windows, macOS, and Linux systems, manage identity and access, maintain on-prem and cloud infrastructure, and serve as an escalation point for the help desk. You will balance day-to-day operations with continuous improvement projects that strengthen security, automation, and the employee experience.

Key Responsibilities:

• Systems administration Administer and maintain servers, endpoints, and core services across a mixed Windows, macOS, and Linux environment.
• Identity & access Manage user lifecycle, groups, and access through Active Directory / Entra ID and SSO providers (e.g., Okta, Google Workspace); enforce least-privilege access.
• Endpoint & MDM Configure and maintain endpoint management and MDM tooling (Intune, Jamf, or equivalent), including imaging, patching, and software deployment.
• Cloud & SaaS Support cloud and SaaS infrastructure (Azure / AWS / Google Workspace), including provisioning, monitoring, and cost awareness.
• Reliability Implement and maintain backups, monitoring, and alerting; respond to incidents and lead root-cause analysis to prevent recurrence.
• Security Apply security best practices: patch management, endpoint protection, MFA, vulnerability remediation, and support of audits and compliance efforts.
• Device management Own the device lifecycle for laptops, desktops, and mobile devices: procurement, provisioning, configuration, tracking, repair, and secure decommissioning.
• Network hardware Install, configure, and maintain on-prem network hardware including internal routers, switches, access points, and firewalls; manage firmware updates and physical connectivity.
• Subscription management Manage software and SaaS subscriptions: track licenses and renewals, control seat assignments, optimize spend, and ensure compliance with vendor terms.
• Automation Build scripts and automation (PowerShell, Bash, Python) to reduce manual work and standardize configurations.
• Support & docs Serve as Tier 2/3 escalation for the help desk; maintain runbooks, asset inventory, and clear technical documentation.

Required Qualifications:

• 2–5 years of experience as a system administrator or in a comparable IT operations role.
• Demonstrated administration of at least two of: Windows Server / Active Directory, macOS fleet management, and Linux servers.
• Working knowledge of networking fundamentals (DNS, DHCP, TCP/IP, VPN, VLANs, firewalls). 
• Experience with identity providers and SSO/MFA, and with endpoint management or MDM platforms.
• Scripting ability in PowerShell, Bash, or Python for automation.
•  Familiarity with cloud platforms (Azure, AWS) and  Google Workspace administration.

• Solid troubleshooting skills and a track record of clear documentation and communication.

Preferred Qualifications

• Relevant certifications (e.g., CompTIA Network+/Security+, Microsoft Azure, AWS, Jamf, RHCSA).

• Experience with infrastructure-as-code or configuration management (Terraform, Ansible, Intune/Jamf profiles).

• Exposure to SIEM, endpoint detection and response (EDR), and security/compliance frameworks (SOC 2, ISO 27001).

• Experience supporting a hybrid or fully remote workforce at scale.

We offer
• Opportunity to work in a fast-growing international fintech company
• Professional growth opportunities alongside with company
• 24 paid vacation days per year and 5 paid sick leave days per year
• 10 Public holidays days
• An opportunity to work full remote or hybrid flexibility
• Collaborative and friendly team
• Professional education budget after 6 months working in the company
• Birthday gift bonus for all our employees