lemfi - Head of InfoSec & ICT Risk Europe
Requirements
• You've owned information security or ICT risk governance at a Central Bank of Ireland regulated firm, ideally in payments, e-money or fintech, and dealt with the Central Bank directly. • You know DORA from doing it, not from a training course. You've built the register, classified real incidents or stood up the framework yourself. • You're a builder at a scaling company, not a maintainer in an enterprise. You'd rather automate a control than add a process step. • You're technically credible. You understand cloud, identity and software delivery well enough to challenge engineers and spot evidence that doesn't stack up, without needing to be hands-on. • You write for boards and regulators the way they want to read: short, specific and decision-led. • You take ownership. A Central Bank finding is yours to close, not someone else's problem. • You have grit. You keep moving when the regulation is ambiguous and the deadline isn't. • You use AI tools daily and you're always looking for ways to apply them to GRC work. • 7+ years in information security, ICT risk or technology risk, with at least 3 in a regulated financial services firm. • Working knowledge of DORA and its technical standards, plus Central Bank of Ireland expectations on operational resilience and outsourcing. • Experience building or running an ISMS aligned to ISO 27001. • Experience with GRC automation platforms such as Vanta or Drata, and integrating them with cloud, identity and ticketing tools. • A track record managing ICT third-party risk and incident reporting in a regulated environment. • Nice to have: NIS2, PCI DSS or GDPR experience, AWS familiarity, and a CISM, CISSP, CRISC or ISO 27001 Lead Implementer or Auditor certification.
Benefits
• Your work here puts money back into families' pockets. That's the reward, and the weight of it. You'll take on some of the hardest problems in finance alongside people who do their best work when the stakes are real. We move fast and we expect a lot, because our customers can't afford for us to do otherwise. In return you get room to own real problems, global impact you can see, and a team that won't slow you down. • Bring grit and ownership and there's a place for them here. Ambition belongs here, come and show us yours. • Don't feel that you're right for this role, but want to submit your interest in working for LemFi? You can join our talent community https://jobs.ashbyhq.com/lemfi/form/talent-community to stay in touch for future opportunities. • RECRUITMENT AGENCIES NOTICE • LemFi does not accept unsolicited CVs from recruitment agencies. We work only with agencies on our preferred supplier list, and only when we’ve asked them for their support. Any CVs sent to us outside this arrangement will not incur a fee. • AI IN HIRING AT LEMFI • We use AI to cut admin, like notetakers that let interviewers focus on the conversation instead of typing. AI never makes hiring decisions. That responsibility always sits with our hiring teams. Read our AI use policy https://www.lemfi.com/en-gb/legal/candidate-ai-use to see how we use AI and how we expect you to use it too.
Apply in one click
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT