Information about the position
We are looking for an Engineering Manager to lead the Cyber Risk and Access Management team. In this role, you will head a group of seven security professionals specializing in Identity and Access Management (IAM), Third-Party (TPRM), and Cyber Risk Management.
As Vinted continues to expand globally, we’re looking for a hands‑on engineering leader who can tackle complex security risks and help scale our access management systems. In other words, we’re seeking a practitioner rather than a documenter—a practitioner who leads from the front, translates security requirements into robust and practical solutions, and supports motivated colleagues by helping them grow through hands‑on experience.
In this position, you’ll
Lead a high‑performing engineering team focused on IAM, TPRM, and Cyber Risk Management.
Define and drive long‑term IAM strategy, guaranteeing that authentication and access controls are highly secure and functioning at peak effectiveness.
Design and deploy a Cyber and Third‑Party Risk Management framework, establishing continuous monitoring and mitigation to protect Vinted from external vulnerabilities.
Translate complex compliance requirements (such as NIS2, ISO 27001) into pragmatic engineering solutions that empower engineering teams rather than slow them down.
Partner with engineering and product teams across Vinted to embed secure and scalable solutions.
Establish metrics and KPIs for security posture, IAM, and cyber risk reduction, and report on them to senior leadership.
About you
Track record in building and managing high‑performing teams.
Experience building large‑scale distributed systems with high availability and security requirements.
Proven success driving cross‑functional security initiatives and influencing leaders without direct authority.
Ability to provide technical direction in the IAM area while fostering a pragmatic execution mindset.




Knowledge of IAM technologies and standards is desirable but not essential.
Able to fluently communicate in English, understand, and explain complex engineering and security concepts to non‑engineering colleagues.
Work perks
The opportunity to benefit from our share options programme25 working days of holidayAccess to all the tools & tech needed for workHome office support: we provide IT workstation equipment and a personal budget of up to €540 for home workplace furniturePrivate health insuranceMental and emotional health support through the Mindletic appFrequent team‑building eventsA personal monthly budget for shopping on VintedThe opportunity to spend up to 90 days per year, 21 of which can be spent working outside of the EU
- on a workationA dog‑friendly officeIn Vilnius office: Gym & in‑house meals at friendly pricesIn Kaunas office: a monthly lunch allowance, and a once‑a‑week provided in‑house lunch and breakfastIndividual Learning Budget
We invest in your professional growth As part of our commitment to continuous learning,

we offer
an annual learning budget to support your personal and career development through courses, certifications, workshops, and more.
Hybrid Work
We’ve adopted a hybrid workplace model where 2 days in the office are recommended but not enforced. It’s up to you and your team to decide on the exact days you’ll spend working together in person.
Equal Opportunity
The Vinted Group is committed to building an inclusive workplace where people from all walks of life feel a sense of belonging. We welcome applications from people of all backgrounds, identities, and life experiences. At Vinted, all applicants are treated fairly without regard to their race, age, religion or belief, sex, national origin, citizenship, gender identity, sexual orientation, disability, or any other protected characteristic.
Salary
Gross monthly salary range for this position is: €6.658—€9.008 EUR

📌 Engineering Manager, Cyber Risk And Access Management (Madrid)
🏢 Vinted
📍 Madrid