Senior Security Controls Lead – DORA Programme (Hybrid)

Talantir; Paris; Hybrid; EUR 70,000 - 100,000; Full time

Job summary

Talantir is seeking a Senior Application Security & Controls Specialist to support our DORA transformation across banking clients in Brussels and Paris. The role focuses on designing, implementing, and embedding security controls across multi-functional teams, with hybrid work and 8 onsite days per month in Paris or Brussels.

You will drive security capabilities such as software supply chain security, SBOM management, data classification, and cryptography policy implementation, collaborating

Qualifications

• 5–10 years of hands-on experience designing or implementing information security controls.
• Proven experience in security risk assessment, application security, or security governance.
• Expertise in software supply chain security, SBOM management, code integrity, and build pipeline security.
• Knowledge of cybersecurity frameworks (ISO 27001, CIS, NIST, DORA) and financial-sector regulatory requirements.

Responsibilities

• Embed & operationalise new security controls across IT and business processes.
• Collaborate with IT, Engineering, Architecture, and CISO to integrate controls into tools and platforms.
• Support teams in threat, risk, and compliance discussions related to software supply chain and cryptography.
• Identify gaps to DORA requirements and provide remediation recommendations.
• Roll out and continuously improve new security controls.

Skills

Security controls design

Security risk assessment

Application security

SAST/DAST

SBOM management

Data classification

Database encryption

Cryptography governance

Regulatory standards (ISO 27001, CIS,N

English fluency

Job description

Talantir is seeking a Senior Application Security & Controls Specialist to support our DORA transformation across banking clients in Brussels and Paris. The role focuses on designing, implementing, and embedding security controls across multi-functional teams, with hybrid work and 8 onsite days per month in Paris or Brussels.

You will drive security capabilities such as software supply chain security, SBOM management, data classification, and cryptography policy implementation, collaborating