Lemfi

Head of InfoSec & ICT Risk - LemFi Europe

Dublin, Remote. Posted 9 days ago

The role

The Head of InfoSec & ICT Risk will own the DORA ICT risk management framework, the information security management system, and the relationship with the Central Bank of Ireland. This is a governance and control role focused on setting frameworks and automating compliance rather than engineering.

What you will do

  • Own the DORA ICT risk management framework end to end
  • Act as the independent ICT risk control function
  • Serve as the Central Bank of Ireland's point of contact for information security and ICT risk
  • Run major ICT incident classification and reporting within DORA timelines
  • Own ICT third-party risk including the register of information and due diligence
  • Run the digital operational resilience testing programme
  • Automate compliance by integrating GRC tooling with cloud, identity, HR and ticketing systems
  • Own information security policy, awareness training and the ISMS aligned to ISO 27001
  • Report security and resilience posture to the board, leadership team and regulator
  • Partner with security engineers to translate regulatory requirements into controls

Required qualifications

  • 7+ years in information security, ICT risk or technology risk
  • At least 3 years in a regulated financial services firm
  • Working knowledge of DORA and its technical standards
  • Knowledge of Central Bank of Ireland expectations on operational resilience and outsourcing
  • Experience building or running an ISMS aligned to ISO 27001
  • Experience with GRC automation platforms such as Vanta or Drata
  • Experience integrating GRC tools with cloud, identity and ticketing tools
  • Track record managing ICT third-party risk and incident reporting in a regulated environment

Nice to have

  • NIS2 experience
  • PCI DSS experience
  • GDPR experience
  • AWS familiarity
  • CISM certification
  • CISSP certification
  • CRISC certification
  • ISO 27001 Lead Implementer certification
  • ISO 27001 Auditor certification

About the company

LemFi is a financial engine for people who move countries to build something better. They provide multi-currency accounts, Savings, eSIMs and Credit.

Head of InfoSec & ICT Risk - LemFi Europe at Lemfi | JobZoey