Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Senior ICT Risk & Information Security Manager (Payments/Fintech): Building and strengthening information security and ICT risk frameworks for a regulated, cloud-based payments business with an accent on scalable governance, regulatory controls, and security assurance. Focus on translating DORA, GDPR, NIS2, and PCI DSS requirements into practical controls, challenging risk assessments and testing outcomes, and improving third-party security and risk reporting.
Location: Tallinn, Estonia; on-site, with a hybrid model including at least 12 monthly in-office days
Company
Bolt is a global mobility and payments technology platform serving customers and driver and courier partners across 50 countries.
What you will do
- Design, implement, and continuously improve the Information Security Management System, ICT risk framework, policies, and controls.
- Define ICT and security risk assessment methodologies and challenge assessments for new products, technologies, and business initiatives.
- Set the scope and approach for security assurance and resilience testing, including control reviews and penetration testing.
- Partner with Engineering, Product, Compliance, Legal, and third-party providers to strengthen security practices and supplier assurance.
- Run security awareness and training programmes and develop dashboards, risk reports, and governance materials for senior stakeholders.
- Take on broader ICT risk leadership responsibilities with exposure to senior governance forums.
Requirements
- Strong expertise in information security governance, ICT risk management, and security framework design.
- Experience translating regulatory and cybersecurity requirements into practical processes, controls, and guidance.
- Structured, risk-based approach with the ability to balance security, compliance, and business needs.
- Clear communication skills for working with technical and non-technical stakeholders across multiple teams.
- Experience in regulated environments such as financial services, fintech, or payments.
- Confidence working with security standards, governance frameworks, and industry best practices.
Nice to have
- Professional certifications in information security or risk management.
Culture & Benefits
- Career growth opportunities and a path toward functional leadership.
- Salary and stock options.
- Physical and mental wellness benefits.
- One-month paid sabbatical after five years at Bolt.
- Annual company events and smaller team gatherings.
- Daily use of AI tools is encouraged to improve work efficiency while maintaining accountability for results.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →