Head of Information Security

Stack

Responsibilities

• ▹Conduct regular security reviews of architecture and significant product changes, as a collaborator in design discussions rather than a gate at the end
• ▹Perform regular practical hardening work alongside engineering: secrets management, access control, network segmentation, logging and alerting coverage, and CI/CD pipeline security
• ▹Design and coordinate external penetration tests, red team exercises and the threat-led penetration testing (TLPT) mandated by DORA, translating findings into a realistic remediation backlog
• ▹Monitor and evaluate the ICT risk management framework required by DORA, working with all lines of defence on the practical application of related policies
• ▹Maintain accurate documentation of the quality assurance process, audits, results and action points
• ▹Prepare and prioritize business requirements for changes based on findings to improve efficiency and accuracy

Requirements

• ▹Proven experience working with ICT regulations such as European Central Bank (ECB) requirements, DORA and Estonian Financial Supervision Authority (EFSA) expectations
• ▹Strong skills in writing and reading code, and in security hardening practices in a cloud environment
• ▹Ability to work fluently with industry-standard security tooling: code analysers, network analysers, vulnerability scanners
• ▹Experience with penetration testing practices and standards
• ▹Ability to use LLM-powered security tools in daily work, and to reason with practical examples about their benefits, risks and governance value in a regulated organisation

Soft skills

What we offer

• ▹Competitive salary and generous benefits package
• ▹5 weeks of vacation
• ▹Private healthcare compensation
• ▹Hobby grant
• ▹Mental healthcare support
• ▹Share options
• ▹Support for professional growth, with budget for skills development
• ▹Remote work from the EU or Estonia

About the company

Bondora is a financial technology company founded in 2008 whose digital products have helped more than 700,000 customers borrow and invest across Europe. It is preparing to acquire a banking licence.