About
Klara AI is a digital banking platform for women offering AI conversational banking, Open Banking, cards, and payment accounts.
Responsibilities
•Drive PCI DSS Level 1 certification, including scoping, gap analysis, remediation, selecting and managing the QSA and pentesters, audits, and ongoing compliance
•Build the security program, including policies, risk assessments, access control, incident response, and vendor reviews
•Secure AWS with the outsourced DevOps team through IAM, logging, monitoring, and vulnerability management
•Build security into the product with the engineering team
•Work with AML and Compliance on audits and partner due diligence
•Handle security questionnaires from banks, card schemes, regulators, and partners
Requirements
•Hands-on experience taking a company to PCI DSS Level 1, ideally from SAQ to full assessment
•Strong AWS security background
•Fintech, payments, or banking experience at a startup or scale-up
•Experience managing auditors, vendors, and outsourced DevOps
•Solid GDPR knowledge and understanding of security for regulated financial products
•A builder's mindset: proposes solutions, not just risks
•Russian and fluent English
Nice to have
•ISO 27001, SOC 2, DORA, LGPD, CISSP, CISM, CISA, AWS Security Specialty, PCI ISA, Open Banking, card issuing
Conditions
•Contractor (B2B contract or self-employment)
•CET overlap and CET-hours availability
