Information Security Manager, EU (2026)

The role

The Information Security Manager will establish and maintain the security and compliance framework in Europe. This role involves technical execution, ICT risk management, and regulatory governance to ensure readiness for Estonian and EU requirements.

What you will do

• Develop, implement, and monitor an information security and ICT risk management program.
• Own the company's Information Security Management System (ISMS).
• Deploy and manage technical safeguards across cloud, on-prem, and application environments.
• Work with global engineering, risk, and compliance functions.
• Identify, assess, and manage ICT risks across business units.
• Serve as the main point of contact for regulators, auditors, and external security assessors.
• Brief management and the Supervisory Board on risks and compliance status.
• Drive employee awareness and training programs.

Required qualifications

• 5+ years in information security operations or management.
• Experience in ICT risk management and oversight of technical security functions.
• Strong understanding of EU/Estonian frameworks, including DORA, ISO27001, SOC2, and GDPR.
• Hands-on experience with cloud environments (AWS, Azure, GCP).
• Experience with secure configuration, vulnerability management, monitoring, and incident response.
• Strong understanding of security engineering practices.
• Familiarity with Linux/Windows hardening, networking, and scripting (e.g., Python, Bash).
• Higher education in a STEM or business-related field.
• Full working proficiency in English and Estonian.
• Proactive, structured, and detail-oriented leader with strong project management, communication, and collaboration skills.

Nice to have

• Experience supporting regulatory licensing or audit processes
• Experience preparing for regulatory inspections
• Working with ISO27001 audits
• Partnering with fractional CISO/DPO roles
• CISSP certification
• CISM certification
• ISO27001 Lead Implementer certification
• CIPP/E certification

About the company

Lightspark is creating the Money Grid, modern, open financial infrastructure that makes payments accessible, affordable, and instant for businesses and users worldwide. Following the acquisition of Striga, they are building a European payments platform connecting fiat and crypto rails.