Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 2 hours agoWe saw it 34 min after it went up

Head of InfoSec & ICT Risk Europe

LemFi20 open roles

Where
Dublin
Work mode
Hybrid
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowHead of InfoSec & ICT Risk EuropeLemFi · Dublin

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on LemFi's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.4% of postings close within 7 days. Measured by our own scanner across the market. LemFi postings stay open a median of 16 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.6%3 days
  3. 13.4%7 days
  4. 21.6%14 days
  5. 36.2%30 days
  6. 59.0%60 days
This job: posted 2 hours ago

LemFi median: 16 days open

The posting

Ambition has no passport. That belief is why LemFi https://lemfi.com/en-gb/careers exists. We're the financial engine for people the world wasn't built to serve, the millions who move countries to build something better and find the financial system hasn't caught up with them yet. We started with remittances: the money people send home to the people they love. Now we run multi-currency accounts, Savings, eSIMs and Credit. Because staying connected to home and building somewhere new are not two separate things. They never were.

THE ROLE

Our Irish entity is regulated by the Central Bank of Ireland, and that brings DORA with it. We're hiring our Head of InfoSec & ICT Risk Europe to own it: the ICT risk control function, our information security management system, and the relationship with the Central Bank on everything security and resilience.

This is a governance and control seat, not an engineering one. Our security engineers build and break things. You set the framework they build against, prove it works, and have the evidence ready before anyone asks for it.

You'll do it with automation, not spreadsheets. If a control can be monitored by a tool, it should be, and you'll be the one wiring those tools into our stack. Based in Dublin, one day a week in our Dublin office, reporting to our CTO.

HOW YOU'LL CONTRIBUTE

- Own our DORA ICT risk management framework end to end: policies, risk appetite, control library and the annual review that goes to the board.

- Act as our independent ICT risk control function, giving engineering and the business real second line challenge rather than sign-off.

- Be the Central Bank of Ireland's point of contact on information security, ICT risk and operational resilience, from information requests and inspections to remediation plans.

- Run major ICT incident classification and reporting within DORA timelines, working with engineering on root cause and making sure fixes land.

- Own ICT third-party risk: the register of information, due diligence and contract terms for critical providers, and exit plans that would actually work.

- Run our digital operational resilience testing programme, from scoping vulnerability assessments and scenario tests to tracking findings to closure.

- Automate compliance. Integrate GRC tooling with our cloud, identity, HR and ticketing systems so controls are monitored continuously, not evidenced once a year.

- Own information security policy, awareness training and the ISMS, aligned to ISO 27001.

- Turn our security and resilience posture into reporting the board, leadership team and regulator can act on: key risk indicators, the risk register and the decisions needed.

- Partner with our security engineers, who own the hands-on build, translating regulatory requirements into clear, testable controls.

WHO YOU ARE

- You've owned information security or ICT risk governance at a Central Bank of Ireland regulated firm, ideally in payments, e-money or fintech, and dealt with the Central Bank directly.

- You know DORA from doing it, not from a training course. You've built the register, classified real incidents or stood up the framework yourself.

- You're a builder at a scaling company, not a maintainer in an enterprise. You'd rather automate a control than add a process step.

- You're technically credible. You understand cloud, identity and software delivery well enough to challenge engineers and spot evidence that doesn't stack up, without needing to be hands-on.

- You write for boards and regulators the way they want to read: short, specific and decision-led.

- You take ownership. A Central Bank finding is yours to close, not someone else's problem.

- You have grit. You keep moving when the regulation is ambiguous and the deadline isn't.

- You use AI tools daily and you're always looking for ways to apply them to GRC work.

WHAT YOU'LL BRING

- 7+ years in information security, ICT risk or technology risk, with at least 3 in a regulated financial services firm.

- Working knowledge of DORA and its technical standards, plus Central Bank of Ireland expectations on operational resilience and outsourcing.

- Experience building or running an ISMS aligned to ISO 27001.

- Experience with GRC automation platforms such as Vanta or Drata, and integrating them with cloud, identity and ticketing tools.

- A track record managing ICT third-party risk and incident reporting in a regulated environment.

- Nice to have: NIS2, PCI DSS or GDPR experience, AWS familiarity, and a CISM, CISSP, CRISC or ISO 27001 Lead Implementer or Auditor certification.

WHY JOIN LEMFI?

Your work here puts money back into families' pockets. That's the reward, and the weight of it. You'll take on some of the hardest problems in finance alongside people who do their best work when the stakes are real. We move fast and we expect a lot, because our customers can't afford for us to do otherwise. In return you get room to own real problems, global impact you can see, and a team that won't slow you down.

Bring grit and ownership and there's a place for them here. Ambition belongs here, come and show us yours.

Follow us on LinkedIn https://www.linkedin.com/company/lemfi/ and Instagram https://www.instagram.com/uselemfi/ and if you haven't already, download the app on the App Store https://apps.apple.com/gb/app/lemfi/id1533066809 or Google Play https://play.google.com/store/apps/details?hl=en&id=com.lemonadeFinance.android.

Don't feel that you're right for this role, but want to submit your interest in working for LemFi? You can join our talent community https://jobs.ashbyhq.com/lemfi/form/talent-community to stay in touch for future opportunities.

RECRUITMENT AGENCIES NOTICE

LemFi does not accept unsolicited CVs from recruitment agencies. We work only with agencies on our preferred supplier list, and only when we’ve asked them for their support. Any CVs sent to us outside this arrangement will not incur a fee.

AI IN HIRING AT LEMFI

We use AI to cut admin, like notetakers that let interviewers focus on the conversation instead of typing. AI never makes hiring decisions. That responsibility always sits with our hiring teams. Read our AI use policy https://www.lemfi.com/en-gb/legal/candidate-ai-use to see how we use AI and how we expect you to use it too.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against LemFi's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on LemFi's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    LemFi's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.