Payments Information Security Officer

About the role

Vinted is expanding its Payments division and needs a Payments Information Security Officer to join the Payments Security team in Vilnius. As the second line of defence, you will protect Vinted Pay’s systems, data and partners while ensuring compliance with Bank of Lithuania regulations, DORA and PCI‑DSS.

Key responsibilities

• Own and continuously improve the end‑to‑end vulnerability management lifecycle across code, runtime and cloud infrastructure, defining classification criteria and remediation SLAs.
• Partner with product and engineering teams to conduct architectural reviews, threat modelling and embed security‑by‑design into new payment flows and digital wallet features.
• Scope, coordinate and govern third‑party penetration testing, TLPT/TIBER exercises and bug bounty programmes, ensuring timely remediation.
• Maximise coverage and efficiency of security tooling (Wiz, SIEM, monitoring) and define logging, audit‑trail and telemetry requirements for payment services.
• Define, maintain and audit physical and environmental security policies for Vinted Pay premises and server rooms.

Required profile

• 3+ years of practical information security, IT risk or security compliance experience, preferably in a FinTech, EMI or PSP environment.
• Strong knowledge of DORA, Bank of Lithuania guidelines, PCI‑DSS v4.0 and ISO/IEC 27001.
• Hands‑on experience with AppSec/DevSecOps practices (SAST, DAST, SCA) and enforcing remediation SLAs.
• Familiarity with cloud environments (AWS, GCP) and modern security platforms such as Wiz.

Required skills

• SAST, DAST, SCA
• Wiz cloud security posture management
• SIEM solutions
• AWS and GCP
• TLPT / TIBER‑EU/LT testing frameworks
• PCI‑DSS, DORA, ISO/IEC 27001 compliance

What we offer

• Share‑options programme
• 25 days of holiday
• Home‑office equipment and €540 budget for furniture
• Private health insurance and Employee Assistance Programme
• Hybrid work model (recommended 2 days onsite)
• Learning budget for courses, certifications and workshops