Information Security Lead

About Aspora People on the move deserve a bank that moves with them. Since 2022, Aspora has been building a borderless financial operating system that makes money as mobile and transparent as its users. Backed by influential venture capitalists like Sequoia Capital, Greylock Partners, Hummingbird Ventures, Y Combinator & Global Founders Capital. We're a team of 150+ across India, the UK, the UAE, EU and the US, working with extreme ownership, radical candour, and an obsession with customer impact. We celebrate builders who question assumptions, ship fast, and turn regulatory complexity into elegant solutions. If you’re driven to redefine what global banking can be, we’d love to build the future with you. About the Role Aspora moves money between the EU, the UK, the UAE and India. Every corridor runs on licences, partner banks and regulators who expect security to be proven, not promised. This role is the named local owner of ICT risk, information security and IT for our EU entity — the person responsible for making our security posture provable to any regulator, auditor or partner bank, on demand. You will own the ICT risk framework, the regulatory relationship and the certification programme, working daily with Infrastructure, DevOps and the Head of Engineering, reporting to our COO. The role is built to grow into our senior security leadership seat. Who You Are — You've worked in regulated financial services. You've run information security or ICT risk inside a bank, EMI, payment institution or fintech, and you've sat across from the regulator during inspections or incident notifications. — You've closed a certification cycle. You've owned or materially run ISO 27001, SOC 2 or PCI-DSS end to end — from scoping through evidence to closing the findings. — You speak engineer. You can read AWS access controls and a vulnerability scan, triage what matters, and have a credible technical conversation with the people who fix it. — You've led the response. You've run incid