Bondora

Security Engineer

• Ensure Bondora’s systems, data, and customers remain protected while building toward a banking licence
• Own information security hands-on, including incident response
• Collaborate with product engineering, SRE, IT, and compliance teams
• Conduct security reviews of architecture and significant product changes
• Perform security hardening across secrets management, access control, network segmentation, logging and alerting, and CI/CD pipeline security
• Design and coordinate external penetration tests, red team exercises, and DORA-mandated TLPT
• Translate security findings into a realistic remediation backlog
• Monitor and evaluate the DORA ICT risk management framework
• Work with all lines of defence on practical policy application
• Maintain documentation of quality assurance processes, audits, results, and action points
• Prepare and prioritize business requirements for necessary changes

Head of Information Security