Information Security Lead

About the role

We are looking for an experienced Information Security Lead to own the design, implementation, and continuous improvement of information security across our cloud‑native, DevOps‑driven engineering environment, as well as corporate IT and office infrastructure. The role combines hands‑on technical delivery with security leadership, setting direction and driving execution.

Key responsibilities

• Define and maintain the information security strategy, standards and roadmap aligned with regulations and best practices.
• Steer security architecture for a cloud‑native environment, creating secure‑by‑design patterns for microservices, APIs and shared services.
• Establish secure SDLC practices and embed automated security controls into CI/CD pipelines.
• Lead security monitoring, logging and threat detection across cloud, infrastructure and application layers.
• Own the security incident response lifecycle and act as incident commander for security events.
• Manage vulnerability and threat scanning, prioritisation, remediation tracking and reporting.
• Govern identity and access management, privileged access and least‑privilege principles.
• Define data protection controls for encryption, key management, classification and loss prevention.

Required profile

• At least 10 years of information/cyber security experience, including 2‑3 years in a leadership role.
• Deep practical knowledge of AWS security (identity, networking, encryption, logging, configuration).
• Hands‑on experience securing DevOps/CI‑CD pipelines and modern microservices architectures.
• Solid understanding of ISO 27001, PCI DSS, SOC 2 and NIST CSF compliance frameworks.
• Fluent English with strong communication and influencing skills.

Required skills

• AWS cloud security
• DevOps, CI/CD pipeline security
• Containers, microservices, APIs, infrastructure‑as‑code
• Application security and secure SDLC
• Security operations, incident response, vulnerability management
• PCI DSS, ISO 27001, SOC 2, NIST CSF
• AI security, GenAI coding assistants, AI‑augmented SAST/DAST, SIEM/SOC analytics
• Identity and access management, privileged access management
• Encryption, key management, data classification, loss prevention

What we offer

• Fast‑growing payment company with a casual atmosphere and state‑of‑the‑art hardware.
• Professional development budget for books, trainings and certifications.
• Team building activities and 25 days paid holiday (plus seniority accrual).
• Fully distributed remote work model.