Information Security Officer

Who we are

Optiver is a global market maker founded in Amsterdam, with offices in London, Chicago, Austin, New York, Sydney, Shanghai, Hong Kong, Singapore, Taipei and Mumbai. Established in 1986, today we are a leading liquidity provider, with close to 2,000 employees in offices around the world, united in our commitment to improve the market through competitive pricing, execution and risk management. By providing liquidity on multiple exchanges across the world in various financial instruments we participate in the safeguarding of healthy and efficient markets. We provide liquidity to financial markets using our own capital, at our own risk, trading a wide range of products: listed derivatives, cash equities, ETFs, bonds and foreign currencies. What you’ll do

The Business Information Security Officer (BISO) function covers a broad scope. As the team is small, work is shared and redistributed based on demand and skillset, so you will have the opportunity to contribute across domains when required. We are specifically looking for strong depth in governance, risk, and awareness; this is where you will spend most of your time.You will help maintain clear oversight of information security risk and support early risk signaling across the organisation. This is a hands-on individual contributor role in a high-performance environment. You will report to the team lead of the Global Business Information Security Officer, based in Amsterdam, and partner closely with colleagues across multiple time zones. Main responsibilities include:

• Establish, maintain, and improve information security policies and procedures that reflect regulatory requirements and how the business operates in practice. - Translate regulatory, legal, and risk requirements into clear internal expectations and documented risk considerations. - Maintain and evolve the risk register, support structured risk reviews, and surface emerging risks early with clear, structured analysis. - Define learning objectives and design security training and phishing campaigns aligned to policy and risk themes. - Prepare structured input for periodic reporting.