Head of Information Security

About the role

Bolt is looking for a Head of Information Security to own its group-wide Information Security Management System (ISMS) and lead the information security programme across the business. It is a hands-on leadership role combining technical depth with strategic ownership, driving security standards, regulatory compliance and risk management while leading a team of around 20 specialists across Product Security, Internal Security, Cloud Security and Security Compliance.

Key responsibilities

• Own and continuously evolve the ISO 27001-certified ISMS so it scales with the business and meets regulatory requirements.
• Lead the development of the security strategy, policies, risk management framework and internal audit programme across multiple engineering locations.
• Define and maintain technical security standards for cloud infrastructure, identity and access management, vulnerability management, endpoint security and incident response.
• Partner with Engineering, Legal, Procurement, Risk and Product Security to embed security in product development, AI initiatives and third-party relationships.
• Lead responses to external audits, certification activities, regulatory assessments and major security incidents.
• Build, mentor and develop a team of about 20 security specialists and foster a strong security culture.

Required profile

• Extensive experience leading information security in a technology company, including ownership or significant development of an ISO 27001-certified ISMS.
• Experience leading security governance activities such as policy development, internal audits, certification programmes and third-party risk management.
• Comfortable communicating security risks and influencing stakeholders from engineers to executive leadership.
• Thrive in fast-paced environments and balance technical depth with strategic leadership.

Required skills

• Strong understanding of modern security practices in cloud environments, identity and access management, vulnerability management, encryption and incident response.
• Practical experience with European regulatory frameworks such as GDPR, NIS2, DORA and the EU AI Act.

What we offer

• A competitive salary and stock options.
• Wellness perks and a 1-month paid sabbatical after 5 years.
• Hybrid model with at least 12 monthly in-office days.
• Career growth opportunities and annual company events.