Head of Information Security

About the role

As the Head of Information Security at Bondora you will safeguard the company’s systems, data and customers while the firm moves toward obtaining a banking licence. The role combines hands‑on engineering, regulatory compliance and process management to raise the overall security posture.

Key responsibilities

• Conduct regular security reviews of architecture and major product changes, participating early in design discussions.
• Perform practical hardening work with engineering teams, covering secrets management, access control, network segmentation, logging, alerting and CI/CD pipeline security.
• Design and coordinate external penetration tests, red‑team exercises and DORA‑mandated threat‑led penetration testing, turning findings into remediation backlogs.
• Monitor and evaluate the ICT risk‑management framework required by DORA, collaborating with all lines of defence on policy application.
• Maintain accurate documentation of quality‑assurance processes, audits, results and action points.
• Prioritise business requirements based on security findings to improve efficiency and accuracy.

Required profile

• Proven experience with ICT regulations such as ECB requirements, DORA and Estonian Financial Supervision Authority expectations.
• Strong ability to read and write code and apply security hardening practices in cloud environments.
• Fluency with industry‑standard security tooling including code analysers, network analysers and vulnerability scanners.
• Hands‑on experience with penetration‑testing practices and standards.
• Experience using large‑language‑model powered security tools and understanding their governance in regulated organisations.

Required skills

• Code analysis tools
• Network analysis tools
• Vulnerability scanners
• Penetration testing
• LLM‑powered security tools
• Cloud security hardening

What we offer

• Competitive salary and share‑option programme.
• Five weeks of vacation, private healthcare compensation, hobby grant and mental‑health support.
• Opportunities to contribute to a €1 bn revenue target and shape the future of a fast‑growing fintech.
• Budget and support for continuous personal and professional development.