Head of InfoSec & ICT Risk - LemFi Europe
LemFi provides international payment products for immigrants, including multi-currency wallets, global money transfers, payment requests, and eSIM connectivity.
About LemFi
LemFi is a financial technology company offering international payment products designed to help immigrants thrive financially. Its services include multi-currency wallets, international money transfers to more than 30 countries, money requests and payment links, and eSIM connectivity. Transfers can be sent to bank accounts, mobile money, and other destinations, typically arriving within minutes.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will own the DORA ICT risk management framework and act as the independent ICT risk control function. You'll be the Central Bank of Ireland's contact on security and resilience, run major ICT incident reporting, manage third-party ICT risk, and run the resilience testing programme. You'll automate compliance by integrating GRC tooling with cloud, identity, HR and ticketing systems, own the ISMS aligned to ISO 27001, and report on risk to the board and regulator. You'll report to the CTO and work one day a week from the Dublin office.
Requirements
- 7+ years in information security, ICT risk or technology risk, with at least 3 in a regulated financial services firm
- Experience owning information security or ICT risk governance at a Central Bank of Ireland regulated firm
- Working knowledge of DORA and its technical standards, and Central Bank of Ireland expectations on operational resilience and outsourcing
- Experience building or running an ISMS aligned to ISO 27001
- Experience with GRC automation platforms such as Vanta or Drata and integrating them with cloud, identity and ticketing tools
- Track record managing ICT third-party risk and incident reporting in a regulated environment
- Technical credibility across cloud, identity and software delivery
- Ability to write for boards and regulators
- Daily use of AI tools
- Nice to have: NIS2, PCI DSS or GDPR experience, AWS familiarity, CISM, CISSP, CRISC or ISO 27001 Lead Implementer or Auditor certification
Responsibilities
- Own the DORA ICT risk management framework end to end
- Act as the independent ICT risk control function with second line challenge
- Serve as the Central Bank of Ireland's point of contact on information security, ICT risk and operational resilience
- Run major ICT incident classification and reporting within DORA timelines
- Own ICT third-party risk including register of information, due diligence, contract terms and exit plans
- Run the digital operational resilience testing programme
- Automate compliance by integrating GRC tooling with cloud, identity, HR and ticketing systems
- Own information security policy, awareness training and the ISMS aligned to ISO 27001
- Produce board, leadership and regulator reporting including key risk indicators and the risk register
- Partner with security engineers to translate regulatory requirements into testable controls