Head of InfoSec & ICT Risk (Fintech)

Location: Dublin, Ireland; hybrid, with one day per week in the Dublin office

Company

hirify.global is a fintech serving people who move between countries through remittances, multi-currency accounts, Savings, eSIMs, and Credit.

What you will do

• Own the DORA ICT risk management framework, including policies, risk appetite, control library, and annual board review.
• Operate the independent second-line ICT risk control function and challenge engineering and business decisions.
• Act as the Central Bank of Ireland contact for information security, ICT risk, operational resilience, inspections, information requests, and remediation.
• Manage DORA incident classification and reporting, root-cause collaboration, and remediation tracking.
• Own ICT third-party risk, including provider registers, due diligence, contract terms, and exit plans.
• Run operational resilience testing, automate compliance controls, and maintain the ISO 27001-aligned ISMS, security policies, training, and reporting.

Requirements

• 7+ years in information security, ICT risk, or technology risk, including at least 3 years in a regulated financial services firm.
• Experience owning information security or ICT risk governance at a Central Bank of Ireland-regulated firm, ideally in payments, e-money, or fintech, with direct Central Bank engagement.
• Practical experience with DORA and its technical standards, including building registers, classifying real incidents, or establishing the framework.
• Working knowledge of Central Bank of Ireland expectations for operational resilience and outsourcing.
• Experience building or running an ISO 27001-aligned ISMS.
• Experience with GRC automation platforms such as Vanta or Drata and integrations with cloud, identity, HR, and ticketing systems.
• Track record managing ICT third-party risk and incident reporting in a regulated environment.
• Technical credibility across cloud, identity, and software delivery, with the ability to challenge engineers without being hands-on.
• Ability to write concise, specific, decision-led materials for boards and regulators and take ownership of closing regulatory findings.

Nice to have

• Experience with NIS2, PCI DSS, or GDPR.
• AWS familiarity.
• CISM, CISSP, CRISC, ISO 27001 Lead Implementer, or ISO 27001 Lead Auditor certification.

Culture & Benefits

• Hybrid work with a regular Dublin office presence.
• Opportunity to own security and resilience problems with visible customer and financial impact.
• Fast-paced environment emphasizing grit, ownership, and practical automation.
• AI tools are used for administrative hiring tasks; AI does not make hiring decisions.

Hiring process

• Applications from recruitment agencies are accepted only from hirify.global's preferred supplier list and when specifically requested.