Information Security Officer

Who are we?

Gain is the private markets super app - a connected global platform transforming how leading investment firms source, evaluate, and execute deals. By combining investment-grade intelligence, AI-powered workflows, and proprietary knowledge, we empower the world’s top deal teams to move faster, reduce risk, and build conviction.

Gain is trusted across more than $1 trillion of private capital, used by 100% of MBB and Big Four firms, and by over 70% of the world’s top 20 M&A advisory houses.

Recognised for our commitment to delivering excellent data, we have been named US and EU Data Provider of the Year (PE Wire), awarded Global Financial Market Review’s Best Use of AI in Finance, listed among Sifted’s Top 100 Fastest-Growing Companies, and ranked in the Deloitte Technology Fast 50. Gain operates globally with offices in New York, London, Amsterdam, Frankfurt, Warsaw, and Bangalore.

What the role entails

We are looking for an Information Security Officer to own and continuously strengthen Gain’s security, compliance, and data-protection posture as we scale globally. This is a hands-on role with real accountability: you will design, implement, and operate our security framework across the organisation.

You will work closely with other functions, including Engineering, Product, Finance/Risk/Legal, and play a critical role in supporting enterprise customer requirements, audits, and regulatory readiness.

Key responsibilities

• Security & compliance ownership

Own and maintain our SOC 2 (Type II) control environment, including evidence collection, remediation, and auditor interaction.

Translate security requirements into pragmatic, scalable controls

• Endpoint & access security

Own MDM strategy and implementation across laptops, mobile devices, and access controls.

Define and enforce device security, identity management, and least-privilege access.

• Risk management

Identify, assess, and mitigate security risks across systems, vendors, and processes.

Lead incident response planning and execution when required.

• Security operations

Maintain policies, procedures, and security awareness programmes.

Manage security tooling and third-party security providers.

Support customer due-diligence, security questionnaires, and enterprise onboarding.

• Data protection & privacy

Support implementation of data-privacy and data-protection requirements (e.g. GDPR and related frameworks)

Partner with Legal and Product on privacy-by-design and customer security assessments.

What we’re looking for

Proven experience (minimum 2-3 years) in a security, compliance, or risk role within a SaaS or technology environment.

Experience with software engineering and Git

Hands-on experience with SOC 2 (Type II)

Experience implementing and operating MDM solutions

Solid understanding of cloud security, access control, and modern SaaS architectures

• Exposure to data-privacy regulation and implementation is a strong plus
• Comfortable operating independently in a fast-moving, scale-up environment

What do we offer?

• Opportunity to play a high-visibility role at a high-growth fintech scale-up with an international footprint
• Clear development path supported by lots of coaching and a feedback-driven approach
• Excellent and competitive base salary
• Annual bonus linked to your performance / OKRs
• Attractive benefits including remote working allowance, learning & coaching benefits, etc.
• Fun working atmosphere with company-wide outings and events
• Above all, the opportunity to carve your signature in a fast-growing SaaS scale-up and be part of a team being built from scratch
• We are post-product-market fit and aspiring unicorn status; this is the right time to come on board and make that ride with us!

Does this sound like a perfect match?

We are proud of our wonderful product and believe it has lots of potential. We are growing fast and having fun while building our platform and company. Does this sound like a team you would like to become a part of? Reach out – we are excited to get to know you and show you what we do!

Gain.AI B.V., with its registered seat in Apollolaan 151, 1077 AR Amsterdam, The Netherlands, or another Gain.AI or Gain.pro entity which runs the recruitment process, further called „Gain", is the controller of personal data you submit as part of the job application. Your personal data will be processed for the purpose of conducting a recruitment process for the job position you apply for. If you provide Gain with explicit consent, your personal data will also be processed for the purpose of conducting future recruitment processes. Please read the Gain Privacy Policy to acquaint yourself with how Gain processes your personal data:

Gain is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity or expression, age, national origin, disability, veteran status, or any other legally protected characteristics.