Head of Information Security - DORA-Ready & Cloud Security

Bondora Group; United States; Remote; USD 137,000 - 205,000; Full time

Benefits offered by this job

Competitive salary

5 weeks vacation

Private healthcare compensation

Hobby grant

Mental healthcare support

Share options

Job summary

Bondora is seeking a Head of Information Security to own security across our systems as we pursue a banking licence. You’ll lead hands-on security, collaborate with engineering, SRE, IT, and compliance, and drive robust controls while shaping our security posture.

The role emphasizes regulatory expertise (ECB, DORA, EFSA), secure coding, cloud security, and governance of security tooling in a regulated environment. Remote/EU-ready location is preferred, with strong impact across the business.

Qualifications

• Experience with ICT regulatory standards (ECB, DORA, EFSA).
• Strong secure coding and cloud security practices.
• Proficiency with security tooling for analysis and testing.

Responsibilities

• Conduct regular security reviews of architecture and product changes.
• Hands-on hardening: secrets, access controls, network segmentation, logging.
• Coordinate external penetration tests and TLPT under DORA.
• Monitor ICT risk management framework and apply related policies.
• Maintain QA, audits, results, and action points documentation.
• Prepare business requirements for changes based on findings.

Skills

ICT regulatory compliance

Cloud security

Penetration testing

Security tooling

LLM-based security tools

Tools

Code analyzers

Network analyzers

Vulnerability scanners

Penetration testing tools

Job description

Bondora is seeking a Head of Information Security to own security across our systems as we pursue a banking licence. You’ll lead hands-on security, collaborate with engineering, SRE, IT, and compliance, and drive robust controls while shaping our security posture.

The role emphasizes regulatory expertise (ECB, DORA, EFSA), secure coding, cloud security, and governance of security tooling in a regulated environment. Remote/EU-ready location is preferred, with strong impact across the business.