Head of IT Security and Governance

Job Description

Do you want to be part of a purposeful and value-driven company on a mission to empower consumers to make smarter financial decisions? Take the opportunity to join Lendo, a leading Scandinavian marketplace for loans and Swedens biggest comparison service for private loans, business loans and mortgages.

A look at what you would do
This is a managerial role, and you will be part of the Tech Leadership Team. The role needs to balance security with business agility, to drive strategic, tactical and operational improvements to meet the security governance challenges of today and the future. You will be the specialist and "go to person" regarding Data Security and GDPR at Lendo but you will be working close to the developers and SRE team as well as the Product Managers, Privacy office and Security forums within Schibsted. You will be able to bring your own unique skill set to the table and collaborate with others to accomplish your goals. The role is wide and you will be very hands on as well as strategic, with a Project Manager as direct report.

Responsibilities & tasks;

Security

• Build and run a security roadmap to improve current setup and ensure to stay ahead

• Security evangelist across Lendo to promote, change and integrate security governance across Lendo business and operations

• Plan and implement security assessments and audits aligned to risk priorities to most effectively manage business risks, lead and drive the changes needed

• Deploy security awareness to raise and improve overall security culture aligned to applicable audiences, from developers to general employees

• Act as privacy lead for all Lendo companies and ensure compliance with GDPR requirements, working closely with the Schibsted Privacy Office

• Maintaining the security framework: Policies, Data inventory, Access Management, Business Continuity, Data Privacy Impact Assessments

• Manage data processing agreements and perform risk assessments on vendors

• Orchestrate and support incident management

• Continuously contribute to building exciting new products and features

• Follow up on security metrics

Governance

• Follow up on projects and facilitate delivery processes within the Tech teams

• Create procedures and checklists to standardise the deliveries and ways of working

• Ensure consistency between the different markets and the tools used

• Maintain existing internal procedures

Who are we looking for?

• Working several years in a security role (Risk assessments and audits, Network and Application security, Vulnerability Management, Identity and Access Management…)

• Familiar with ISO 2700x, GDPR and financial regulations

• Working application security expertise across cloud IaaS and SaaS environments, including direct security management experience with AWS or Google

• DevSecOps knowledge and implementation expertise, inclusive of automation of vulnerability scans and security compliance tools

• Working practical knowledge of full security suite of controls from identity access management across network and application security with both on-premise and SaaS-based application solutions

• Familiarity with operations and security technical compliance maintenance

• CISSP certification is a plus

• Excellent communications skills with an entrepreneurial spirit

• Ability to proactively solve problems and react to security challenges in real-time

• Excellent skills in spoken and written English

• Bachelor's degree in computer science or equivalent

About Lendo
Lendo is a leading marketplace for loans. On our marketplace people seek guidance, browse, get and manage consumer loans, car loans, credit cards, business loans and mortgages. Today we operate in Scandinavia including 250+ employees working each day to empower people to make smart financial decisions that actually make a difference in their lives. Since our humble beginning back in 2007, we have helped thousands of people get a fair price on loans, get in control and let the lenders compete for their business.

In Lendo we believe in a market for loans built on trust and transparency. As a market leader we take it upon ourselves to shape the industry to compete more transparently and change the lending practices for the better. Deep in the Lendo DNA lives our core values #winasateam, #customercentric, #focusonexecution and #alwaysimprove that guides us in the choices we make each day. Having a sustainable business mindset also plays a big part of our daily operations and our culture.

Our excellent Lendoers are our most important asset. This is why we strive towards strengthening the employee experience arranging many social activities regularly. We have a hybrid set up that supports a blend of in-office remote, and home office. We foster a friendly, inclusive and knowledge-sharing culture using insights as a tool to learn, grow and deliver differentiated benefits to both our customers and lending partners. More information on www.lendo.group

How to apply
The selection will be held on an ongoing basis so please don’t wait to send your application. We look forward to hearing from you!