Senior ICT Risk & Information Security Manager

About the role

Bolt is looking for a Senior ICT Risk & Information Security Manager to join its Payments Governance, Risk & Compliance team. In this hands‑on position you will shape and strengthen the security and risk frameworks that support Bolt Payments as a regulated, cloud‑based payments business.

Key responsibilities

• Design, implement and continuously improve the Information Security Management System (ISMS) and ICT risk framework, ensuring scalability and compliance with regulations such as DORA and PCI DSS.
• Define risk assessment methodologies and taxonomy, independently challenge assessments for new products, technologies and initiatives.
• Set the scope, frequency and approach for security assurance and resilience testing, including control reviews and penetration testing, and evaluate remediation plans.
• Partner with Engineering, Product, Legal, Compliance and third‑party providers to strengthen security practices and third‑party assurance.
• Run security awareness and training programmes to foster a risk‑aware culture across the organisation.

Required profile

• Senior‑level experience in information security, ICT risk management or related fields within a regulated environment.
• Proven ability to translate regulatory requirements into practical controls and governance processes.
• Strong collaboration skills to work with cross‑functional teams and external partners.
• Experience driving security improvements and risk reporting at scale.

Required skills

• Knowledge of PCI DSS compliance.
• Familiarity with GDPR, DORA and NIS2 regulations.
• Experience with Information Security Management Systems (ISMS).
• Penetration testing and security assurance testing.