Head of IT Security Company IT · Aarhus, Denmark

Are you ready to take the lead on internal IT security at a fintech disruptor?

As we continue our journey to becoming the best everyday bank in the Nordics, we are looking for a Head of IT Security to lead and develop our security efforts. We need someone who can ensure our systems and data remain secure, robust, and resilient, even as we challenge the status quo and redefine the banking landscape.

At Lunar we are democratising the power of money and changing the way we all bank, pay, and invest. Since starting in Aarhus in 2015, we've grown rapidly and are now a major player in the Nordics, with offices in Copenhagen, Aarhus and Stockholm 🚀

So who are we? Are we a tech company or a bank? Well, we're both, breaking free from the usual categories. Here, tech isn't just a cool add-on; it's the core of how we do things. With our own banking license, we go head-to-head with traditional banks. What sets us apart is the mix of tech and financial services, giving us the power to shake up a dusty industry that's ready for a change.

As our new Head of IT Security, you will be part of our IT Security & Company IT organization, reporting directly to Danny Winandy. The team comprises 8 amazing individuals working in Aarhus and Copenhagen who are focused on ensuring our internal IT infrastructure runs smoothly within the broader Tech function, led by our CTO, Kåre Kjelstrøm. You'll work closely with colleagues across Company IT, our Tech squads, Legal, and Risk Management amongst others to ensure we are delivering on our IT Security initiatives while leading and mentoring a small team of security professionals.

What will you do?

• Drive inspirational leadership
  • You will take ownership of internal IT security, evaluating the current state of our security measures, identifying vulnerabilities, and executing opportunities for safeguarding Lunar and our IT environment.
  • You will lead and mentor 1 direct report.
  • Drive close stakeholder management with teams and squads currently working on IT security initiatives.
• Secure our perimeters
  • Take an operational hands-on approach, diving into the details and solving operational issues as they arise.
  • Stay on top of current and future cyber threats, vulnerabilities, and security trends.
  • Define clear security requirements for our key platforms, including IDP, MDM, and EDR.
  • Implement device hardening and security protocols for all end-points, applications, and networks within our perimeter.
  • Continue to scale our Microsoft-based endpoint detection solution across our Apple and Windows-based devices.
  • Coordinate and execute penetration tests.
  • Oversee that our security incident response process is running smoothly.
  • Developing and implementing security awareness training programs for employees.
• Meet compliance and regulatory requirements
  • Ensure adherence to our strict regulatory requirements set forth by DFSA (Danish Financial Supervisory Authority) and European regulatory frameworks (DORA).
  • Conduct security assessments of 3rd party vendors.

Curious about the Lunar culture? 💚
Everything at Lunar centers around our core - to challenge. It’s infused into our four values and guides us in how to work together, lead projects, and lead people to reach our mission. Our values aren't just words on a page - they're what make us who we are and shape the vibe of our culture. And trust me, we’re all about the vibe. For a longer read about our culture, click here.

We're excited to welcome everyone to apply for this impactful role! We can’t wait to follow up with talents who we believe are the best fit based on the following criteria:

• You're not afraid to roll up your sleeves and dive into operational tasks, ensuring that security measures are effectively implemented and maintained.
• Prior experience with applying industry standard frameworks such as NIS2, ISO 27001, NIST Cybersecurity Framework, or the CIS Controls.
• Whether you’re already an expert or have a strong commitment to expanding your knowledge of DORA and other relevant regulatory frameworks, this role offers the opportunity to further develop your expertise in this area.
• Experience in applying IT security principles in a SaaS-driven environment, with knowledge of platforms like Google Workspace, Okta, Kandji, AWS, Microsoft Azure, Intune, and Defender is an advantage.
• Expertise in deploying endpoint detection solutions and device hardening.
• Hands-on experience in coordinating and executing penetration tests with external partners.
• You have a demonstrated ability to anticipate and proactively address potential security threats, initiating preventative actions to mitigate risks.
• You're a natural collaborator who excels at building relationships across functions, with the ability to communicate complex security concepts to diverse audiences, including senior leadership and external stakeholders, translating them into clear, actionable insights.
• At least 1-2 years of leadership experience is preferable, with a passion for mentoring and empowering your team.

Are you ready to join the journey? Apply now and let’s find out more!

While you hold on tight for us to get back to you, curious to see what we’re up to? Follow us on LinkedIn for business announcements and releases 📢, check out our Instagram for an inside scoop on what it’s like to work here 📸, and visit our blog for the latest tech and product insights! 📱🫰

Depending on the regulations in the country you will be employed, we will ask to see or obtain information about your criminal record.

Department
Company IT

Locations
Aarhus, Denmark

Employment type
Full-time