Head of Information Security (Cybersecurity)

Location: Tallinn, Estonia; hybrid work with at least 12 monthly in-office days

Company

Bolt is a global mobility platform offering ride-hailing, food delivery, scooters, e-bikes, and car-sharing services across 50 countries.

What you will do

• Own and continuously evolve Bolt's ISO 27001-certified Information Security Management System.
• Lead the security strategy, policies, risk management framework, and internal audit programme across engineering locations.
• Define technical security standards for cloud infrastructure, identity and access management, vulnerability management, endpoint security, and incident response.
• Partner with Engineering, Legal, Procurement, Risk, and Product Security to embed security into product development, AI initiatives, and third-party relationships.
• Lead external audits, certification activities, regulatory assessments, and responses to major security incidents.
• Build, mentor, and develop a team of approximately 20 security specialists across Product Security, Internal Security, Cloud Security, and Security Compliance.

Requirements

• Extensive experience leading information security in a technology company, including ownership or significant development of an ISO 27001-certified ISMS.
• Strong knowledge of cloud security, identity and access management, vulnerability management, encryption, and incident response.
• Practical experience with European regulatory frameworks including GDPR, NIS2, DORA, and the EU AI Act.
• Experience leading security governance, policy development, internal audits, certification programmes, and third-party risk management.
• Ability to communicate security risks and influence stakeholders from engineers to executive leadership.
• Drive, integrity, ownership, and the ability to balance technical depth with strategic leadership.

Culture & Benefits

• Hybrid work combining flexibility with in-person collaboration.
• Rewarding salary and stock options.
• Physical and mental health wellness benefits.
• One-month paid sabbatical after five years at Bolt.
• Annual company events and smaller team gatherings.
• Daily use of AI tools is expected where it improves work quality and efficiency.