T

Tide

Freemium digital banking for small businesses

Head of ICT

Security Governance, Risk & ComplianceUpdated on Nov 12
Full-timeLuxembourgIn-person

About the Job

Requirements

  • Extensive experience running or governing ICT in a regulated financial institution, including DORA delivery.
  • Deep third-party and outsourcing risk experience across the full lifecycle, from due diligence and contracting to monitoring and exit.
  • Experience with intra-group delegation models, sub-outsourcing, data location, and concentration risk.
  • Direct experience with the CSSF and a clear understanding of Luxembourg expectations on local substance.
  • Fluency in modern cloud and engineering practice, including CI/CD, Infrastructure as Code, and cloud-native architecture, with the depth to form an independent view of a cloud configuration.
  • Experience implementing an ISO 27001 Information Security Management System and familiarity with frameworks such as NIST Cybersecurity Framework and PCI DSS.
  • Ability to write for a regulator and hold a position with a group function that does not report to the role.
  • Fluent English.

Responsibilities

  • Own the entity's ICT strategy, ICT project roadmap, and digital operational resilience strategy.
  • Act as Service Owner for the intra-group arrangement with Tide Platform Ltd, setting service levels and evidence rights, monitoring performance, and assessing material change.
  • Direct the entity's outsourcing lifecycle, from due diligence and contractual protections to registers, monitoring, exit strategy, and CSSF notification; the role is intended to take on the Outsourcing Officer mandate, subject to appointment by Authorised Management.
  • Own the entity's position on criticality and concentration risk across the third-party estate, including cloud, and the associated exit strategies.
  • Be accountable for TPSA meeting its DORA obligations in practice, including asset and critical function classification, incident management, resilience testing, and exit planning.
  • Set the entity's first-line ICT security requirements, verify that they are met, and govern how TPSA uses AI.
  • Report ICT and third-party risk to Authorised Management and the Board Risk and Compliance Committee, and lead ICT dialogue with the CSSF, including audits and regulatory examinations.

Desired Qualifications

  • CISSP, CISM, or CISA certification.
  • French, German, or Luxembourgish language skills.

About the Company

Tide

Freemium digital banking for small businesses

Tide provides digital banking for small and medium-sized businesses, offering business accounts, invoicing, expense management, and instant card control through a digital-first platform. It works by automatically tagging income and expenses, uploading and matching receipts, and storing records, while invoices can be sent, paid, and tracked within the app and a free business Mastercard is managed from the app. The platform differentiates itself with an integrated, all-in-one toolkit that combines accounting features with banking, plus a risk-based onboarding process that may reject some applicants. Tide’s goal is to simplify financial management for business owners by providing a comprehensive, easy-to-use banking and bookkeeping solution in one place.

Company size
1,001-5,000
Company stage
Growth Equity (Venture Capital)
Total funding
$539.7M
Headquarters
London, United Kingdom
Founded
2015

Recently Posted Jobs

Explore more opportunities at Tide

See more jobs