Head of Information Security

atBondoraRemote

Estonia Full-time Cybersecurity / Security EngineerLead

Posted Sep 22

This is a fully remote position, open to applicants in Estonia.

📋 Description

• Safeguard Bondora’s systems, data, and clientele while progressing towards obtaining a banking license.

• Take charge of information security in a hands-on capacity, including managing incident responses.

• Collaborate with teams across product engineering, Site Reliability Engineering (SRE), IT, and compliance.

• Conduct security assessments of architectural designs and major product modifications.

• Implement security enhancements in areas such as secrets management, access control, network segmentation, logging and alerting, and CI/CD pipeline security.

• Design and oversee external penetration tests, red team activities, and TLPT as mandated by DORA.

• Convert security findings into an actionable remediation backlog.

• Monitor and assess the DORA ICT risk management framework.

• Work collaboratively with all lines of defense to ensure practical policy implementation.

• Maintain thorough documentation of quality assurance procedures, audits, outcomes, and action items.

• Prepare and prioritize business requirements for essential modifications.

⛳️ Requirements

• Demonstrated experience with ICT regulations, including European Central Bank requirements, DORA, and the expectations of the Estonian Financial Supervision Authority.

• Proficient in writing and reading code.

• Knowledge of security hardening techniques within a cloud environment.

• Competence in using industry-standard security tools, such as code analyzers, network analyzers, and vulnerability scanners.

• Familiarity with penetration testing methodologies and standards.

• Ability to utilize LLM-powered security tools in daily operations while understanding their advantages, risks, and governance implications in a regulated setting.