Senior Application Security & Controls Specialist (DORA Programme) – Banking Client – Brussels / Paris

Talantir; Paris; Hybrid; EUR 70,000 - 100,000; Full time

Job summary

Talantir is seeking a Senior Application Security & Controls Specialist to support our DORA transformation across banking clients in Brussels and Paris. The role focuses on designing, implementing, and embedding security controls across multi-functional teams, with hybrid work and 8 onsite days per month in Paris or Brussels.

You will drive security capabilities such as software supply chain security, SBOM management, data classification, and cryptography policy implementation, collaborating

Qualifications

• 5–10 years of hands-on experience designing or implementing information security controls.
• Proven experience in security risk assessment, application security, or security governance.
• Expertise in software supply chain security, SBOM management, code integrity, and build pipeline security.
• Knowledge of cybersecurity frameworks (ISO 27001, CIS, NIST, DORA) and financial-sector regulatory requirements.

Responsibilities

• Embed & operationalise new security controls across IT and business processes.
• Collaborate with IT, Engineering, Architecture, and CISO to integrate controls into tools and platforms.
• Support teams in threat, risk, and compliance discussions related to software supply chain and cryptography.
• Identify gaps to DORA requirements and provide remediation recommendations.
• Roll out and continuously improve new security controls.

Skills

Security controls design

Security risk assessment

Application security

SAST/DAST

SBOM management

Data classification

Database encryption

Cryptography governance

Regulatory standards (ISO 27001, CIS,N

English fluency

Job description

Senior Application Security & Controls Specialist (DORA Programme) – Banking Client – Brussels / Paris

Duration: 1 year contract

Rate: Flexible

Hybrid Working – 8 days onsite per month in the Paris or Brussels office, the rest is remote working

About the Role:

We are looking for an experienced and dynamic Senior Security Analyst to support DORA transformation through the design, implementation, and embedding of new transversal security controls across the organization.

In this role, you will contribute to the definition, rollout, and continuous improvement of security capabilities in domains such as software supply chain security, SBOM management, security code review, data classification, database encryption, cryptography policy implementation, and code integrity management.

To achieve this, you will work closely with multi‑functional teams across the organization and will be exposed to a diversified set of topics, business areas, and technologies.

Your responsibilities:

• Embedding & Operationalisation of new security controls
• Work with IT, Engineering, Architecture, and CISO teams to integrate new controls into existing processes, tools, and platforms.
• Support teams in understanding threats, risks, and compliance expectations related to software supply chain, cryptography, and application security.
• Identify gaps between current capabilities and new DORA requirements and provide clear, actionable remediation recommendations.
• Contribute to the rollout, adoption, and continuous improvement of newly introduced security controls.

Security Advisory

• Perform targeted security assessments on applications, processes, and technical components to evaluate compliance with the new security controls.
• Map system architectures, technology stacks, and data flows to validate control applicability.
• Provide expert‑level advisory on secure implementation across different environments (on‑prem, mainframe, cloud).
• Collaborate closely with architects, engineers, developers, risk teams, and control owners to support remediation plans and technical decisions.

Experience

• 5–10 years of hands‑on experience in designing or implementing information security controls, frameworks, or processes.
• Proven experience in security risk assessment, application security, or security governance.
• Strong expertise in at least several of the following areas:

• Software Supply Chain Security
• SBOM management
• Code integrity and build pipeline security
• SAST / DAST / code analysis / ASPM (Application Security Posture Management)
• Data classification
• Database encryption & key management
• Cryptography governance & implementation
• Solid knowledge of cybersecurity frameworks (ISO 27001, CIS, NIST, DORA)
• Good understanding of financial‑sector IT security regulatory requirements, especially DORA, ESMA, and outsourcing regulation is a plus.
• Fluency in English.

• Certification such as CISSP, CSSLP, CCSP, CISM, CISMP, GCIH, CEH, etc. is an advantage.
• Strong communication and coordination skills, with the ability to engage effectively with stakeholders across diverse teams (Supply Chain, CISO, IT, etc.).
• Proactive and self‑motivated, comfortable working in a dynamic and continuously evolving environment.
• Strong analytical capabilities combined with creative problem‑solving skills.
• Structured and synthetic, able to deliver clear, concise, and relevant responses to requests.
• Calm, organized, and efficient under pressure, maintaining clarity even in situations of uncertainty.
• Collaborative mindset, able to work effectively with executives, business leaders, and technical teams.
• Autonomous and well‑organized, with strong prioritization and time‑management abilities.

Soft Skills

• Strong communication and coordination skills, with the ability to engage effectively with stakeholders across diverse teams (Supply Chain, CISO, IT, etc.).
• Proactive and self‑motivated, comfortable working in a dynamic and continuously evolving environment.
• Strong analytical capabilities combined with creative problem‑solving skills.
• Structured and synthetic, able to deliver clear, concise, and relevant responses to requests.
• Calm, organized, and efficient under pressure, maintaining clarity even in situations of uncertainty.
• Collaborative mindset, able to work effectively with executives, business leaders, and technical teams.
• Autonomous and well‑organized, with strong prioritization and time‑management abilities.