Security Lead – Fully Remote

🚀 Be part of a movement to change the way Europe pays

In today’s digital world, payments often still feel outdated: random delays and confusing rules make it harder than it should be to pay and get paid. The European Payments Initiative (EPI) is here to change all that, forever.

With Wero, our digital wallet, we make sending and receiving money simple, seamless and secure across France, Belgium and Germany, with more countries and omnichannel solutions coming soon. Supported by 14 major banks and the two largest European acquirers, EPI is building a new, proudly European payment system: easy, instant and transparent, all for the greater good.

🔎 What's in it for you

As a Security Lead, you will embark on an exciting journey that blends hands-on technical work with dynamic people management. This role offers a unique opportunity to leverage your expertise in IT security while leading a talented team. If you are passionate about cybersecurity and thrive in a collaborative environment, this position is perfect for you.

🐝 About the team

You’ll be part of a Pan-European Operations & Service Delivery team that takes care of security — but fully remote – you will be part of a team of 8 security experts distributed across the Netherlands, Belgium, Spain and other European locations.

Finally, you will report directly to Thierry Huque, our Chief of Operations and Service Delivery, who has a proven track record in IT security within the payment sector.

💥 Your impact

People management:

• Delegate tasks and responsibilities based on individual strengths and expertise, and oversee workload to ensure fair and balanced distribution
• Manage and organize team on-call assignments
• Identify skill gaps within the team and arrange targeted training sessions or certifications. Encourage continuous learning on the latest tools and attack techniques
• Lead the team during high-pressure situations, such as major incidents or escalations
• Foster a collaborative environment to enhance teamwork and knowledge sharing
• Celebrate team and individual achievements to maintain high morale

Technical expertise:

• Oversee daily security operations, including monitoring alerts, triaging incidents, and managing response efforts
• Ensure security requests and incidents are handled according to defined procedures, acting as the primary interface for other departments and as an escalation point for unresolved issues
• Review and refine Standard Operating Procedures (SOPs) for handling recurring operational tasks
• Document lessons learned from incidents and implement changes to prevent recurrence
• Assess the effectiveness of existing tools and recommend configuration changes, upgrades, or replacements
• Generate weekly or monthly reports on the team's performance, incidents handled, and metrics achieved
• Keep leadership informed about key risks, operational metrics, and team progress

✅ If you had joined us last month, here’s what you could have done

• You would have been part of a 3-day onsite in Amsterdam with the security team
• You could have been diving into some awesome new projects
• You could have presented an opportunity to develop innovative and engaging initiatives

🕵🏻‍♀️ To succeed, you should meet at least 70% of these requirements

• +10 years of professional experience in IT Security, with a minimum of 5 years in security team management
• Practical experience in a highly regulated environment ideally in the financial industry or in public cloud
• Must have high-level cybersecurity certifications such as CISSP or CISM. Additionally, certification in service management (ITIL, ISO20000) or project management (Prince2, PMP, etc.) is required
• Fluent in English (CEFR C1 or C2); French, German or Dutch or any additional European languages is a plus
• Expertise in managing Windows and OSX endpoints and practical experience in incident monitoring and incident response.
• Practical experience in using Security Information and Event Management (SIEM) and Security Orchestration, Automation, and Response (SOAR) platforms
• Knowledge of the Azure security stack, including Microsoft Defender, Sentinel, and EntraID
• Proficient in implementing cybersecurity standards and frameworks such as ISO27001 and the NIST Cybersecurity Framework (NIST CSF)
• Nice to have: Certifications in Azure security and SIEM/SOAR vendor products