At a glance
- Employment
- Full-time
- Location
- Luxembourg
- Salary
- EUR 90,000-120,000 / year
About Tide
- At Tide, we help SMEs save time and money in the running of their businesses by not only offering business accounts and related banking services, but also a comprehensive set of highly usable and connected administrative solutions, from invoicing to accounting.
- Tide is transforming the small business banking market and now supports over 2 million members globally across the UK, India, Germany and France.
- Using advanced technology, all solutions are designed with SMEs in mind. With quick onboarding, low fees and innovative features, we thrive on making data driven decisions to serve our mission: to help SMEs save time and money so they can get back to doing what they love.
- Tide facts:
- - Tide is available for UK, Indian, German and French SMEs
- - Over 2 million members across UK and India
About the role
- Tide is hiring an ICT Manager for Tide Platform S.A. (TPSA), the EU entity based in Luxembourg, as the senior technology role in the entity sitting in the first line of defence.
- The role involves setting TPSA's requirements for Tide's group engineering function, verifying delivery, approving changes affecting the entity, and requiring remediation when standards are not met.
- Responsibilities cover the entity's ICT risk management framework, digital operational resilience strategy, DORA obligations, cloud estate, and first line security requirements.
Responsibilities
- Own the entity's ICT Strategy, the ICT project roadmap and digital operational resilience strategy, and keep both current.
- Act as Service Owner for the intra-group arrangement with Tide Platform Ltd, setting service levels and evidence rights, monitoring performance and assessing material change.
- Direct the outsourcing lifecycle for the entity, from due diligence and contractual protections to registers, monitoring, exit strategy and CSSF notification, with the intention to take on the Outsourcing Officer mandate.
- Own the entity's position on criticality and concentration risk across the third-party estate, including cloud, and the exit strategies behind it.
- Be accountable for TPSA meeting its DORA obligations in practice: asset and critical function classification, incident management, resilience testing and exit planning.
- Set the entity's first line ICT security requirements, verify they are met, and govern how TPSA uses AI.
- Report ICT and third-party risk to Authorised Management and the Board Risk and Compliance Committee.
- Lead our ICT dialogue with the CSSF, including audits and regulatory examinations.
- Shape how fast new European markets are opened and how much of Tide's platform capability is brought along.
Requirements
- Extensive experience running or governing ICT in a regulated financial institution, including DORA delivery.
- Deep third-party and outsourcing risk experience across the full lifecycle, from due diligence and contracting to monitoring and exit.
- Experience with intra-group delegation models, sub-outsourcing, data location and concentration risk.
- Direct experience with the CSSF, and a clear understanding of Luxembourg expectations on local substance.
- Fluent in modern cloud and engineering practice, including CI/CD, Infrastructure as Code and cloud-native architecture.
- Experience with ISO 27001 ISMS implementation, and frameworks such as NIST CSF and PCI DSS.
- The ability to write for a regulator, and the presence to hold your position with a group function that does not report to you.
Preferred qualifications
- CISSP, CISM or CISA preferred.
- Fluent English, with French, German or Luxembourgish useful.
Benefits
- Gross annual salary ranging from €90,000 to €120,000
- Equity
- Generous annual leave on top of bank holidays
- Maternity, paternity, and adoption parental leave
- Extended unpaid and paid sabbatical leave options
- Access to therapy sessions, courses, meditations, and workshops for mental wellbeing
- Paid days annually for volunteering or personal growth
- Annual budget for books, courses, coaching, and more (Learning & Development)
- Contribution towards setting up your home office
Workplace
- Role is based in Luxembourg.
Skills
- CI/CD
- Infrastructure As Code
- Cloud-native Architecture
- ISO 27001 ISMS
- NIST CSF
- PCI DSS
