Head of InfoSec & ICT Risk - LemFi Europe
Core
Own the ICT risk control function, information security management system, and regulatory relationship with the Central Bank of Ireland for a regulated fintech entity.
Role type
Senior IC Head of InfoSec & ICT Risk
Builds
DORA ICT risk management framework, automated compliance monitoring, and regulatory reporting
Domain
Financial services / Fintech / Regulatory Compliance
Required skills
DORA framework implementation, ICT risk governance, Central Bank of Ireland regulatory liaison, ISMS (ISO 27001), GRC automation, third-party risk management, digital operational resilience testing, incident classification and reporting, cloud and identity architecture knowledge, board-level reporting
Preferred skills
NIS2, PCI DSS, GDPR, AWS, CISM, CISSP, CRISC, ISO 27001 Lead Implementer or Auditor certification
Technologies
Vanta, Drata, GRC tooling, cloud platforms, identity management systems, ticketing systems
Responsibilities
Own the DORA ICT risk management framework end to end; Act as the independent ICT risk control function; Serve as the Central Bank of Ireland's point contact on security and resilience; Run major ICT incident classification and reporting; Own ICT third-party risk management; Run the digital operational resilience testing programme; Automate compliance by integrating GRC tooling; Own information security policy and ISMS; Report key risk indicators to the board and regulator; Partner with security engineers to translate regulatory requirements into controls
Seniority
Senior, hands-on IC