Information Security Officer (PCI DSS Level 1)
Klara AI | Remote, CET overlap | Contractor (B2B contract or self-employment)
Klara AI is a digital banking platform for women: AI conversational banking, Open Banking, cards and payment accounts.
🎯 The mission
Own information security end to end. First big goal: take us from PCI DSS SAQ D to full Level 1 certification. You report to the CTO and fully own the security agenda.
🛠 What you'll do
•Drive PCI DSS Level 1: scoping, gap analysis, remediation, choosing and managing the QSA and pentesters, the audit, and ongoing compliance after it
•Build the security program: policies, risk assessments, access control, incident response, vendor reviews
•Secure AWS with our outsourced DevOps team: IAM, logging, monitoring, vuln management
•Build security into the product together with engineering
•Work with AML & Compliance on audits and partner due diligence
•Handle security questionnaires from banks, card schemes, regulators and partners
✅ You have
•Hands-on experience taking a company to PCI DSS Level 1 (ideally from SAQ to full assessment)
•Strong AWS security background
•Fintech, payments or banking experience at a startup or scale-up
•Experience managing auditors, vendors and outsourced DevOps
•Solid GDPR knowledge and an understanding of security for regulated financial products
•A builder's mindset: you propose solutions, not just risks
•Russian and fluent English and CET-hours availability
➕ Nice to have
ISO 27001 / SOC 2 · DORA / LGPD · CISSP, CISM, CISA, AWS Security Specialty, PCI ISA · Open Banking or card issuing
