ICT Risk & Information Security ManagerICT Risk & Information Security Manager

About Bolt Bolt is shaping a future where cities are built for people, not cars. What started as an ambitious project of a 19-year-old in 2013 has grown into a global mobility platform used by more than 200 million customers and 4.5 million driver and courier partners across 50 countries. From ride-hailing and food delivery to scooters, e-bikes, and car-sharing, Bolt helps people move through cities every day. Small, autonomous teams drive this work, combining the speed and ownership of a startup with the scale of a global technology company backed by more than €1bn in funding. And we're just getting started. Why join Bolt? Build the future of mobility and help transform how people live and move in cities. Tackle challenges at scale that span technology, operations, regulation, and growth. Take real ownership early. Small, lean teams mean your decisions matter from day one, and you'll learn fast alongside some of the best people in the industry. Join one of Europe's leading technology companies, backed by world-class investors including Sequoia. About the role We're looking for a Senior ICT Risk & Information Security Manager to join our Bolt Payments Governance, Risk & Compliance team. In this role, you'll shape and strengthen the information security and ICT risk frameworks that support Bolt Payments' growth as a regulated, cloud-based payments business. You'll design scalable governance processes, translate regulatory requirements into practical controls, and help ensure our security and risk practices evolve alongside the business and the changing threat landscape. You'll work closely with Engineering, Product, Legal, Compliance, Internal Audit, and external partners to assess risks, improve security processes, and drive compliance with regulations such as DORA, GDPR, NIS2, and PCI DSS. This is a hands-on role focused on building and improving frameworks rather than maintaining the status quo, while providing expert guidance across the organisation. Main tasks and responsibilities Design, implement, and continuously improve the Information Security Management System (ISMS), ICT risk framework, policies, and controls, ensuring they scale with the business and meet regulatory requirements, including DORA and PCI DSS. Define ICT and security risk assessment methodologies and taxonomy, independently challenging and assuring assessments carried out for new products, technologies, and business initiatives to ensure risks are identified and managed effectively. Define the scope, frequency, and approach for security assurance and resilience testing, including control reviews and penetration testing, and independently challenge testing outcomes and remediation plans to ensure risks are addressed effectively. Partner with Engineering, Product, Compliance, Legal, and third-party providers to strengthen security practices and third-party assurance, while running security awareness and training programmes that build a strong risk-aware culture. Develop clear risk reporting, security dashboards, and governance materials that give senior stakeholders visibility into our security posture, key risks, regulatory compliance, and priorities for improvement. Take on broader ICT risk leadership responsibilities as you demonstrate strong delivery and judgement, with a clear path towards functional leadership supported by defined objectives, mentoring, and exposure to senior governance forums. About you You have strong expertise in information security governance, ICT risk management, and designing security frameworks that enable business growth while managing risk. You enjoy translating complex regulatory and cybersecurity requirements into practical processes, controls, and guidance that teams can successfully implement. You approach challenges with a structured, risk-based mindset, balancing security, compliance, and business needs while identifying opportunities for continuous improvement. You communicate clearly with both technical and non-technical stakeholders, building trusted relationships and explaining complex security topics in an accessible way. You thrive in collaborative, fast-moving environments, taking ownership of strategic initiatives while working effectively across multiple teams and priorities. You bring experience in regulated environments such as financial services, fintech, or payments, and are confident working with security standards, governance frameworks, and industry best practices. Professional certifications in information security or risk management are considered a strong advantage. Why you’ll love it here Accelerate your professional growth with unique career opportunities. Enjoy a rewarding salary and stock options, knowing that as Bolt succeeds, so do you. Take care of your physical and mental health with our wellness perks. Celebrate 5 years at Bolt with a 1-month paid sabbatical to recharge. Connect with colleagues at annual company events and smaller team gatherings. Balance flexibility and in-person collaboration with our hybrid model, including at least 12 monthly in-office days. Some perks may differ depending on your location and role. At Bolt, using AI daily is a baseline expectation for everyone. If there’s a faster, smarter way to do your work, we expect you to find it. You’re still responsible for the output, so the standard stays high when using AI tools. Experience is great, but what we really look for is drive, intelligence, and integrity. So even if you don’t tick every box, please consider applying! Everyone is welcome Bolt is an equal opportunity employer. We are committed to building a diverse and inclusive workplace where all qualified applicants are considered for employment without regard to race, colour, nationality, religion, gender or gender identity, sexual orientation, age, or disability. We welcome applications from all backgrounds and are happy to make reasonable accommodations throughout our hiring process. If you require any adjustments, please let us know.