Cybersecurity Lead - Core Products
Romania - Bucharest - Edenred Digital Center
Edenred
Découvrez le groupe Edenred, la plateforme de service et de paiements qui accompagne au quotidien les acteurs du monde du travail dans 45 pays.Take a step forward and let Edenred surprise you.
Every day, we deliver innovative solutions to improve the life of millions of people, connecting employees, companies, and merchants all around the world.
We know there are hundred ways for you to grow. With us, you will expand your skills in a multicultural, challenging, and dynamic environment.
Dare to join Edenred and get ready to thrive in a global company that will offer you endless opportunities.
Edenred is all about meritocracy. You come as you are, and you contribute. Indeed, the Edenred Group recognizes, recruits and develops all talents and singularities.
We are committed to preventing all forms of discrimination and to providing all our candidates with equal opportunities regardless of their gender and gender expression, disability, origin, religious belief and sexual orientation or any other criteria.
ABOUT EDENRED
Edenred is a pioneer, a tech leader and the everyday companion for people at work across 45 countries.
Our 12,000 employees are committed to making the world of work a better place for all, one that is safer, more efficient and more user-friendly. At Edenred, our passion for customers, respect, imagination, simplicity and entrepreneurial spirit are our values. For anyone who needs to vibe in their professional life, we are the best place for you to work and grow.
The Edenred Digital Center (EDC) in Bucharest, Romania is Edenred Group's new Digital hub for strategic IT projects.
CONTEXT/ROLE
Edenred is implementing a global strategy to strengthen IT security and compliance across its platforms. This strategy is driven by four pillars:
- People – Anchor cyberculture with best practices and awareness programs
- Rules – Enforce consistent IT security policies group-wide
- Delivery – Drive security projects and services to improve maturity
- Performance – Establish a culture of control, assessment, and continuous improvement
As part of the Global Platform Core Team, the Cybersecurity Lead – Global Platform will ensure security by design and operational security for strategic products used across all Edenred business units. These products include:
- IAM solutions
- A central API Gateway
- Mobile applications (wallets, card manager, etc.)
- Payment orchestration services
This role reports to the Cybersecurity Leader for eQuarter/Central Apps, with a dotted line to the Group Director for Global Applications.
Position SCOPE & Key Responsibilities
The Cybersecurity Lead will:
- Build and lead a cybersecurity roadmap including strategic projects and daily operations
- Promote and track cybersecurity budgets aligned with platform priorities
- Manage and coordinate cybersecurity incidents and alerts
- Ensure compliance in deployments (e.g. card manager rollout across BUs)
- Embed “security by design” practices into the entire SDLC, including:
- CI/CD security integration (SAST, DAST, pen testing)
- Secure observability (CyberSOC monitoring)
- Vulnerability remediation follow-up
- API security, authentication process validation, and IAM design
- Integration of resilience practices (DRP, data integrity, cyber crisis playbooks)
- Support secure cloud-native development and third-party collaboration (APIs & data-as-a-product)
- Act as the go-to cybersecurity contact for both development teams and group-level security centers of expertise
- Align platform-level controls with group-wide methodologies and standards
Key Relationships
- Key stakeholders include:
- Developers, architects, product owners, QA engineers
- Platform support and monitoring teams
- Cybersecurity Centers of Expertise (AppSec, IAM, Compliance & Resilience, CyberSOC)
Required skills & profile
Experience
- 5+ years in cybersecurity, ideally in global or complex environments
- Proven experience applying security by design in large-scale tech projects
- Familiarity with compliance-driven initiatives and platform security controls
Technical Competencies
- Threat modeling and IT risk analysis
- Secure design, standards, and architecture
- Web, mobile, and cloud security (Azure preferred)
- CI/CD pipeline security and automation tooling
- Identity and Access Management (IAM) principles and practices
- API security best practices
- Infrastructure-as-code and cloud-native security principles
Soft Skills
- Strong communication and persuasion abilities, adapted to business and tech audiences
- Team spirit and ability to work cross-functionally and internationally
- Proactive mindset, strong organizational and follow-up skills
- Strategic thinking with hands-on execution capability
- Ability to balance security with business/product needs
Languages
- Mandatory: English
- Nice to have: French
VIBE WITH US
Joining us means:
- Taking part in an ambitious corporate project
- Becoming part of a team that embraced the digitalization challenge and enjoys this transformation every day
- Living our values every day: passions for customers, respect, imagination, simplicity, entrepreneurial spirit.
Because:
- You will greatly contribute to build the project that will improve the customers’ experience on an international level
- You will get exposure to various global cultures and teams
- We offer you a very pleasant working environment close to Bucharest city center
- We also have for you: meal tickets, holiday vouchers, health subscription, flexible hours, work from home, flexible benefits system, on-the-job training & e-learning platforms.
And we do not stop here!
Apply now and Vibe with Us!
* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰
Tags: API Gateway APIs Application security Automation Azure CI/CD Cloud Compliance DAST IAM Monitoring Pentesting Risk analysis SAST SDLC Strategy
Perks/benefits: Career development Flex hours Health care
More jobs like this
Explore more career opportunities
Find even more open roles below ordered by popularity of job title or skills/products/technologies used.