CISO

bunq; Amsterdam; Hybrid; EUR 120,000 - 180,000; Full time

Job summary

bunq is seeking a CISO to lead security strategy and hands-on engineering within a hybrid Amsterdam setting. You will align our security program with regulations, drive risk-based remediations, and coordinate audits and policy reviews across IT Risk, Compliance, and leadership.

You will design and oversee secure systems and resilient architectures, continuously improving controls to counter evolving threats while enabling agile innovation at bunq.

Qualifications

• Familiarity with security regulations and compliance regimes.
• Ability to assess risks and decide remediation or acceptance.
• Experience designing secure systems and resilient architectures.
• Experience coordinating audits, pentests, and policy reviews.

Responsibilities

• Align bunq’s security strategy with applicable regulations and risk posture.
• Engineer security controls within SecOps to keep systems secure and compliant.
• Lead audits, tests, and policy reviews; coordinate with IT Risk, Compliance, and executives.
• Close control gaps by tracking regulatory developments and directing remediation.

Skills

Regulatory knowledge

Risk assessment

Security engineering

Audits & penetration testing

Cross-team coordination

Job description

CISO — Hybrid, Amsterdam, 40 hours per week

Ready to get shit done?

Every user, system, and transaction at bunq deserves to be secure by design. As our Information Security Manager your mission is twofold: safeguard bunq’s platforms against evolving threats and ensure compliance with the world’s most demanding regulations—without slowing down innovation. You’ll combine strategic oversight, hands-on engineering insight, and cross-team coordination to close security gaps before they become incidents.

Take Ownership:

• Aligning bunq’s strategy with applicable security regulations, assessing security risks (including vulnerabilities), and deciding which to remediate, mitigate, or accept.
• Security engineering within SecOps, ensuring secure system and application design that is resilient, up-to-date with evolving threats, and compliant with relevant standards.
• Continuous security assurance through regular audits, penetration tests, configuration reviews, and coordinated IT security operations with IT Risk, Compliance, and the management board.
• Closing control gaps by monitoring regulatory developments, threat intelligence, and best practices; directing remediation, maintaining the Information Security Policy, and engaging auditors and regulators.