Information Security Lead

The role

The Information Security Lead will own the ICT risk framework, regulatory relationships, and certification programmes for the EU entity. This person will work with Infrastructure, DevOps, and the Head of Engineering to ensure security posture is provable to regulators and auditors.

What you will do

• Build and run the DORA risk framework, policies, risk register and third-party register.
• Represent the EU entity to the Bank of Lithuania, auditors and partner banks.
• Run the group ISO 27001 and PCI-DSS programme for the EU entity.
• Own the incident-response playbook and regulatory notification path.
• Run DR and BCP drills.
• Act as technical counterpart to the DPO on DPIAs, transfer assessments and breach notifications.
• Convert audit and regulatory requirements into engineering tickets and follow them to closure.
• Own devices, identity and access, SaaS tooling and joiner/mover/leaver for EU staff.

Required qualifications

• Worked in regulated financial services.
• Run information security or ICT risk inside a bank, EMI, payment institution or fintech.
• Sat across from the regulator during inspections or incident notifications.
• Owned or materially run ISO 27001, SOC 2 or PCI-DSS end to end.
• Can read AWS access controls and a vulnerability scan.
• Run incident response and DR drills hands-on.
• Work in Lithuanian and English.

Benefits

• Competitive salary
• Comprehensive benefits
• ESOPs aligned with Aspora's long-term vision

About the company

Aspora is building a borderless financial operating system. The team consists of 150+ people across India, the UK, the UAE, EU and the US.