Lead IT Security AI-Redteamer

Constructor

OUR MISSION Constructor’s mission is to enable all educational organisations to provide high-quality digital education to 10x people with 10x efficiency.  With strong expertise in machine intelligence and data science, Constructor’s all-in-one platform for education and research addresses today’s pressing educational challenges: access inequality, tech clutter, and low engagement of students. PLEASE SEND YOUR RESUME IN ENGLISH ONLY. DUTIES AND RESPONSIBILITIES: * Strategic Roadmap Ownership: Define and drive a multi-year, outcome-based roadmap that aligns with global business goals and North Star metrics. * Market Intelligence: Lead comprehensive market research to identify emerging trends in AI and EdTech, ensuring our product strategy remains ahead of the curve. * Monetization & Pricing: Own the pricing strategy for international markets. Conduct analysis to determine price floors and ceilings, and optimize monetization models to maximize LTV. * Scientific & Data Leadership: Apply a scientific approach to product discovery. Analyze performance data to validate hypotheses and drive data-informed decision-making across the organization. * Stakeholder Management: Act as a key partner for the Leadership Team, delivering clear, data-backed insights and recommendations that influence company-wide strategy. * Team Mentorship: Lead, mentor, and scale a team of product managers, fostering a culture of accountability, growth, and high-quality PRD standards. * Cross-functional Collaboration: Serve as the primary point of contact for Engineering, Data Science, and Design teams to prioritize features and resolve technical/business trade-offs. QUALIFICATIONS AND EXPERIENCE: * 5+ years of experience as a Product Manager in software development (SaaS, EdTech, or AI-driven products). * Bachelor’s or Master’s degree in Computer Science, Data Science, or a related technical/scientific field. * Proven ability to manage products using complex data analysis and scientific research methodologies. * Expert knowledge of prioritization frameworks (e.g., RICE, WSJF) and experience building outcome-driven (not just feature-driven) roadmaps. * Strong track record of writing high-quality PRDs and managing sprints in a fast-paced, agile environment. * Experience leading cross-functional stakeholders and directly mentoring other product managers. * Fluent English with the ability to articulate technical concepts to non-technical stakeholders clearly. NICE TO HAVE: * Academic background in Business (MBA/BBA) or completion of advanced product strategy programs (e.g., Reforge, Kellogg, or similar). * Experience in building and scaling AI/ML-powered products. * Background in Science or experience with academic/research-focused software. * Experience managing products with millions of users across multiple geographical regions. WHAT WE OFFER * 💻 Choice of work equipment (e.g., laptop, monitor, etc.) * 🇬🇧 English classes (iTalki – $130 monthly) * ⏰ Flexible schedule (we usually work between 09:00/10:00 and 18:00/19:00 CET or EET) * 👶 Newborn bonus (€500 per child) * 🧠 Patent remuneration * 🌴 Paid leave * 🧑‍💻 Remote work in locations without our offices * Hybrid work in locations with offices (2 days in-office, 3 days remote) Constructor fosters equal opportunity for people of all backgrounds and identities. We are led by a gender-balanced board committed to building a diverse and inclusive organisation where everyone can become their best self. We do not discriminate based on age, disability, gender identity, sexual orientation, ethnicity, race, religion or belief, parental and family status, or other protected characteristics. We welcome applications from women, men and non-binary candidates of all ethnicities and socio-economic backgrounds. We encourage people belonging to underrepresented groups to apply.

DATAPAO

At DATAPAO, data ignites passion, community fuels collaboration, and growth knows no bounds. We are a leading Data Engineering and AI consulting company backed by Databricks and recognized for our unmatched delivery standards and rapid growth. We have been named Databricks EMEA Emerging Business Partner of the Year (2024), achieved the Golden Tier status in the Databricks Partner Program, and made three consecutive appearances on the Financial Times FT1000 list. We are currently looking for a Senior Data Engineer to join us remotely in Spain. You will work with our EMEA and US customers to help them solve their data engineering, ML, ML Ops, and cloud migration puzzles. "As a Data Engineer at DATAPAO, you will have the unique opportunity to push the boundaries of technology and lead the way in how data transforms the world. We work with customers who want to innovate and change their industries. So it never gets boring! Sorting out a complex technical puzzle, setting up a new data architecture from scratch, or guiding our customers through adopting the latest technologies is our routine here. Hence, we'd expect you to be more than just a (data) engineer. We'd expect you to breathe and live data, to thrive for knowledge and excellence, and to be keen to build something enduring and impactful for our customers. We'd expect you to be a (data) Paoneer!"  (Máté Gulyás, CEO) What will you do? As a Senior Data Engineer, you are expected to deliver (across industries) on some of our most complex projects - individually or by leading small delivery teams. Although we work for the biggest multinational companies where years-long behemoth projects are the norm, our projects are fast-paced, typically 2 to 4 months long. Most are delivered using Apache Spark/Databricks on AWS/Azure and require you to directly manage the customer relationship alone or in collaboration with a Project Manager. Additionally, at this seniority level, we expect you to compound your impact across the team and the organization - by supporting our pre-sales process, mentoring more junior engineers, and contributing to hiring best-in-class data talent. What does it take to fit the bill? Technical Expertise * You (ideally) have 5+ years of experience in Data Engineering, with a focus on cloud platforms (AWS, Azure, GCP); * You have a proven track record working with Databricks (PySpark, SQL, Delta Lake, Unity Catalog); * You have extensive experience in ETL/ELT development and data pipeline orchestration (e.g., Databricks Workflows, DLT, Airflow, ADF, Glue, and Step Functions.); * You’re proficient in SQL and Python, using them to transform and optimize data like a pro; * You know your way around CI/CD pipelines and Infrastructure as Code (Terraform, CloudFormation, or Bicep); * You’ve hands-on experience integrating Databricks with BI tools (Power BI, Tableau, Looker).  Consulting & Client-Facing Skills * Ideally, you bring a proven history in consulting, from scoping to gathering requirements, designing solutions, and communicating effectively with stakeholders. If you bring a product company background with you, that's also fine as long as you can show a good consulting mindset and desire to be customer-facing; * You’ve successfully delivered projects like Data Lakehouse buildouts and cloud data migrations; * You excel in explaining technical concepts to non-technical audiences and drive decision-making. Operational Readiness & Soft Skills * You’re (almost) ready to hit the ground running, immediately contributing to live client projects; * In a fast-paced consulting environment, where no two days are the same, flexibility and problem-solving comes naturally to you. Furthermore, resilience and thriving on challenges are essential traits in our industry; * Your communication skills are on point—whether you’re writing, speaking, or collaborating with stakeholders, you know how to keep everyone in the loop. What do we offer? You'll have the rare opportunity to join DATAPAO at a time when you can still meaningfully impact our growth trajectory and organizational success. Furthermore, as our first-ever Spain hire, you could meaningfully contribute to expanding our local presence and, eventually, establishing a physical hub in this geography. Surely, we know everyone needs a little something to do their best work. Here is a list of some other extras we offer:   * The chance to work remotely - as we don't have a physical office in Spain yet, we offer a fully remote setup for the time being. However, given our strong community emphasis, we'd expect you to spend one month in our Budapest hub during onboarding and visit the office for one week every quarter; * World-class educational benefits - there’s no shortage of learning opportunities at DATAPAO, meaning that you'll get access to Databricks' public and internal courses to learn all the tricks of Distributed Data Processing, MLOps, Apache Spark, Databricks, and Cloud Migration from the best. Additionally, we'll pay for various data & cloud certifications, you'll get dedicated time for learning during work hours, and access to our internal library;  * Flexible PTO days - we’re flexible with how many days you take off if that does not conflict with customer success and the work getting done; * Fully paid Medical Leave for up to 15 days per year - because when you’re unwell, we want you to focus on recovery and not worry about your paycheck; * Comprehensive private health insurance plan via Allianz - offered via our EOR (Employer of Record) provider, Remote.com. Remote will be your official employer in Spain for the foreseeable future until we establish our own legal entity in Spain; * Employee Assistance Program (EAP) via Allianz & Remote - life always happens! And we'd like to be there for you when it counts the most. Through EAP, we offer our employees access to psychology, financial, and legal consulting services via phone or in person; * Top-notch working equipment - working comfortably means working well. You will get a MacBook Pro and a sign-up bonus of 500 EUR gross (to be paid with your first payroll) to set up your home office or whatever else is needed to give your best; * The chance to make an impact in a high-transparency culture - open feedback and no politics are things we value a lot at DATAPAO. Additionally, you'll get the chance to work in the field of data & AI and shape the future of a rapidly growing tech company. IMPORTANT NOTE: Given that we are still sorting our way in Spain, this list will likely get an update in the following months, and we're also committed to growing it with us over time. The gross salary for this position ranges from 70.000 to 80.000 EUR/year, depending on your assessed seniority level during the selection process. Please note that currently we are unable to support transfer or offer full sponsorship for Skilled Worker visas as we’re just setting foot into Spain. WANT TO KNOW MORE ABOUT US? DATAPAO is a Data Engineering and AI company that covers the entire data transformation from architecture to implementation. Beyond delivering solutions, we also provide data and AI training and enablement. We are backed by Databricks - the creators of Apache Spark, and act as a delivery partner and training provider for them in Europe. Additionally, we are Microsoft Gold Partners in delivering cloud migration and data architecture on Azure. Our delivery partnerships enable us to work in a wide range of industries and with some of the most prominent global companies, such as Norsk-Hydro, Richter, Bayer, Schufa, GetYourGuide, TechnoAlpin, and Logically, to name just a few. As a training provider, we deliver onsite and online courses globally for Databricks and on our own. We have been teaching professionals at Apple, Amazon, Uber, Microsoft, T-Mobile, GE, Ericsson, and many more to improve their impact with data. For even more insights, check the links below: * Designing and Implementing a Real-time Data Lake with Dynamically Changing Schema (EN) by Máté Gulyás (2021, Spark AI Summit) * Productionising Machine Learning models (EN) by Máté Gulyás (2023, Mndwrk Event) * "Ha a data governance jól működik, az olyan, mint egy láthatatlan szupererő” (HU) by Máté Gulyás (2023, Com-Forth Zóna Podcast) You can also follow us on LinkedIn for all the good stuff or just hit our recruitment team at jobs@datapao.com We’re firm believers in scaling up a team without judgment or prejudice. What we really care about is working with the best people out there, no matter their background. And you should also not worry if you don't tick every box in the requirements. If you’re passionate about data and learning new things, you’ll fit right in, and we'd love to hear back from you. When we hear back from you, we'd like you to know that we are committed to your privacy and keeping your data safe. We do not share your data with any third parties (except the ones we use to run our recruitment process) and keep your application for two years unless you ask us otherwise. We use your data solely for recruitment purposes, such as letting you know about new career opportunities at DATAPAO and/or managing your application. But if you want to know more about how we store and manage your data, check our privacy policy.

Upvest

At Upvest, we are on a mission to make investing as easy as spending money. Upvest empowers businesses to offer a wide range of investment products and the best experience in the field of capital market investment and retirement planning. Upvest’s Investment API is easy to integrate so that fintechs and financial institutions can save resources and fully focus on their core business. We are proud to partner with Europe’s leading Fintechs and financial institutions such as DKB, Revolut, N26 and Raisin. Founded in 2017 by Martin Kassing, Upvest now brings together over 270 talented professionals from more than 70 nationalities. Upvest is backed by €280M in total funding from world-class investors, including BlackRock, Tencent, Sapphire Ventures, and Bessemer Venture Partners, Earlybird, Notion Capital, and Motive. Our latest €105M funding round in March 2026 - led by Sapphire and Tencent - serves as a massive catalyst for our growth, allowing us to offer premier investment experience. ABOUT THE ROLE: As the Lead IT Risk Manager, you will play a pivotal role in owning and evolving our IT Risk Framework within the second-line risk function. Operating in a highly growth-oriented and regulated financial services environment, this role demands an exceptional blend of technical governance expertise, independent challenge capabilities, and strategic stakeholder management. You will serve as the primary second-line authority for IT risk matters, providing oversight to the first-line IT GRC team, leading comprehensive risk assessments, and ensuring strict alignment with Upvest's overarching Risk Appetite Framework. WHAT YOU’LL DO: Risk Framework Ownership & Oversight * Own and evolve the IT Risk and Business Continuity Management Framework within the second line, keeping it scalable as the business grows. * Provide independent second-line oversight and challenge to the first-line IT GRC team on the design and effectiveness of IT controls. * Lead IT risk identification, assessment, and mitigation across cyber, technology resilience, third-party, and data security, linking back to the Risk Appetite Framework. IT Governance & Compliance Management * Mature the ISMS by guiding policies, standards, and procedures with the relevant process owners. * Define baseline controls and run continuous ISMS maturity assessments against ISO/IEC 27001:2022 and related standards. * Oversee third-party IT risk, internal technology exposures, and business continuity assessments. IT Audit & 2nd Line Assurance * Drive second-line assurance reviews and deep-dives across critical IT risk domains, reporting findings and tracking remediation to closure. * Support internal and external audits, including IT General Controls (ITGC) and Application Controls. * Run preliminary internal IT audits to prepare engineering, product, and business teams for official engagements. Regulatory Alignment & Stakeholder Management * Lead Upvest's DORA obligations, including ICT risk management, incident classification, and third-party ICT risk oversight. * Track the regulatory landscape (BaFin, EBA, ESMA, ECB) and translate requirements into actionable risk guidance. * Act as the primary second-line contact for IT risk, reporting posture and material risk events to senior stakeholders, the C-suite, and the Risk Committee WHAT YOU BRING: * Education: University degree in Computer Science, Information Technology, Information Security, or an equivalent academic/professional background. * Experience: Minimum of 5+ years of progressive professional experience in IT Governance, Risk, Compliance, and Security (IT GRC / IT Security) within a regulated financial institution, bank, fintech, or fast-scaling B2B platform environment. * Technical Depth: Deep operational understanding of IT governance standards (e.g., ISO 27001), regulatory risk requirements (BaFin BAIT/MaRisk), and modern resilience standards like DORA. * Communication Skills: Exceptional verbal and written articulation skills in English, with a proven ability to engage credibly with a multilingual international stakeholder base, technical engineering leads, and C-level executives. * Mindset: A strong product engineering and security-focused mindset, combined with commercial pragmatism and the ability to operate confidently under ambiguity. HOW WE UPVEST IN YOU: * Best-in-class AI tools: Every Upvenger has €20,000 per year to spend on the best AI tools available — so you're always working with the most powerful models and tooling on the market. * Impact-driven work: We’re building the infrastructure that will power the future of investing in Europe. It’s complex, ambitious, and meaningful. You’ll work with modern technologies and create something entirely new. No legacy systems, no limits. * Wellbeing: Recharge with 30 days of annual leave and maintain a healthy lifestyle with sports benefits. Access confidential professional coaching and enjoy the flexibility to work remotely abroad for up to 183 days a year. Recharge with UpRest, a one-month fully paid sabbatical after every 4 years of working at Upvest. * Development: Growth is in our DNA. Each Upvenger has access to a personal development budget and the freedom to decide how to use it. * Flexible work environment: Work from any of our hubs in Berlin, London or Tallinn hybrid or remotely across Europe, depending on the role. We give you the choice and budget to work where you’re most comfortable and productive, either at home or in the office. You choose. * Compensation and equity: We believe that all Upvengers contribute to our success and deserve a competitive, above-market salary and a participation in our employee equity program. * Team celebrations: Participate in company-wide events, such as UpFest, dinners, offsites and our Holiday party, to connect with colleagues and celebrate our achievements. * Inclusion: We’re committed to a culture where everyone belongs and thrives. Our Employee Resources Groups foster inclusion and connection, like Upfem for our female Upvengers, or UpVergent supporting neurodivergent Upvengers and allies. OUR VALUES: * Make it easy for others. We simplify the complex and act with the best intentions * Own the outcome. We are proactive, fast and confident to get the job done, valuing progress over perfection. * Rise to the challenge. We aim high and push the boundaries. We stay curious, learn and celebrate our wins together. * Tell the story. We start with the Why to align on purpose. We are transparent and share knowledge to empower and inspire others. Upvest is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.