Information Security Officer

Company: Klara AI

Information Security Officer
Klara AI | Remote, CET overlap | Contractor
About Klara AI
We're building a digital banking platform for women: AI conversational banking, Open Banking, cards and payment accounts. We've launched, we work with licensed partners, and we're scaling across Europe, with Brazil next. Everything runs on AWS.
The role
You will own information security at Klara AI, end to end. The first big goal: take us from PCI DSS SAQ D to full Level 1 certification. You run the process, choose and manage the external partners (QSA, pentesters, other vendors), and drive it to the finish line. You report to our CTO and have full ownership of the security agenda.
What you'll do
* Own the PCI DSS Level 1 journey: scoping, gap analysis, remediation plan, selecting and managing the QSA and other vendors, audit, and ongoing compliance after certification
* Build and run our security program: policies, risk assessments, access control, incident response, vendor security reviews
* Secure our AWS environment together with our outsourced DevOps team (architecture, IAM, logging, monitoring, vulnerability management)
* Work with the CTO and engineers to build security into the product from the start
* Work with AML & Compliance on shared requirements, audits, and partner due diligence
* Handle security questionnaires and audits from banks, card schemes, regulators, and partners
* Prepare the security and data protection side of our Brazil launch
* Find practical ways to say "yes, and here's how to do it safely"
What we're looking for
* Hands-on experience taking a company through PCI DSS Level 1 certification, ideally from SAQ to full assessment
* Strong AWS security background
* Startup or scale-up experience in fintech, payments, or banking
* Experience managing external auditors and vendors, and working with outsourced DevOps
* Solid understanding of GDPR and security requirements for regulated financial products
* A builder's mindset: you propose solutions, you don't just list risks
* Ability to work independently with 100% ownership and to communicate clearly with engineers and executives
* Fluent English & Russian, availability during CET working hours
Nice to have
* ISO 27001 / SOC 2 experience
* Familiarity with DORA, LGPD, or Brazilian financial sector security requirements
* Security certifications (CISSP, CISM, CISA, AWS Security Specialty, PCI ISA)
* Experience with Open Banking or card issuing
How we work
Small team, flat structure, fast decisions. Less process, more results. You'll have the freedom to do things the right way and the support to get them done.
What we offer
* Contractor engagement, fully remote
* Compensation based on your experience and expectations
* A role with real ownership and direct impact on our growth and launch plans

apply