Proving who you are, opening an account, signing in to a banking app, and moving money across borders now happen without anyone visiting a branch. Each of those steps depends on trust in systems most customers never see. The five leaders below protect different layers of that trust: a national digital identity service, a digital banking platform, two commercial banks, and the central bank behind the euro.
Andreas Bergqvist – CISO/CSO, Finansiell ID-Teknik BID AB
Andreas Bergqvist has secured a bank, a telecom operator, and now an identity service. Since 2019 he has been chief security officer of Finansiell ID-Teknik BID AB, the company behind BankID, and he has spoken about digital trust and the collaboration that supports it. He arrived with experience on both sides of the services that depend on identity. At Handelsbanken, he spent more than a decade moving from IT security architect to head of group information security, and he then served as CISO of Telia. His career began in network and server support, followed by network security at NASDAQ OMX and security consulting at Netsecure.
Brian Vlootman – CISO, Backbase
Brian Vlootman prefers security that works in practice to security that looks perfect in theory, emphasizing measurable outcomes and the real-world effectiveness of tools and processes. As CISO of Backbase since 2020, he focuses on building a defensible security architecture and driving cyber resilience for the company’s digital banking platform. He has also spoken about protecting applications once they are running in production, rather than relying only on shift-left practices. He joined Backbase in 2017 as a security architect and became director of information security before taking the CISO role. Earlier, he spent years in healthcare technology, at Hiscom, iSOFT, and CSC, moving from systems engineering to security architecture and information security officer roles.
Frederico Moura – Head of Information Security, CISO, Banco BPI
Frederico Moura has spent more than 25 years at Banco BPI, and his path there runs through almost every part of technology delivery. He started as an analyst and developer in 2001, moved into project management, spent eight years as a scrum master, and then managed IT sourcing. In 2021 he took charge of the bank’s identity and access management team, a natural bridge to the trust questions at the heart of digital banking, and since May 2023 he has led information security as CISO. He also teaches as part of Porto Business School’s executive master’s faculty.
Glenn Attridge – Group Chief Information Security and Resilience Officer, Bank of Ireland
Resilience is in Glenn Attridge’s job title. He joined Bank of Ireland as Group CISO in late 2024, and in February 2025 his role expanded to Group Chief Information Security and Resilience Officer. In May 2026, the bank was awarded ISO 22301 certification for business continuity management after a two-year review of how it identifies critical services, manages dependencies, and responds to disruption. Attridge said the certification “clearly demonstrates our strategy in action, to be a more resilient company,” crediting teams across the organization. He came to the role after nearly two decades in security at Royal Bank of Scotland and NatWest, starting as an information security consultant and rising through threat management and cyber defense leadership to become NatWest Group’s deputy CISO and head of cyber defense and security response, with a spell in information protection and business resilience at KPMG.
Philipp Amann – Head of Digital Security Services (Cybersecurity) Division, European Central Bank
Philipp Amann’s remit at the European Central Bank includes security support for the digital euro project. Since July 2025 he has led the ECB’s Digital Security Services division, with a CISO remit spanning cyber defense, incident response, identity security, cyber threat intelligence, cyber risk management, and security engineering. He also chairs the Security Risk Management Working Group, which brings together CISO counterparts from the eurozone’s national central banks, and works on security innovation including AI and post-quantum readiness. Before the ECB, he was Group CISO of Austrian Post, leading two programs for NIS2 compliance and supporting work on DORA. He spent nine years as head of strategy at Europol’s European Cybercrime Centre, where his responsibilities included its cybercrime threat assessments and prevention work such as the No More Ransom project, and in 2023 the European Commission nominated him as one of two candidates to lead the European Cybersecurity Competence Centre. His earlier career took him through the OSCE, the Organisation for the Prohibition of Chemical Weapons, the International Criminal Court, and the Comprehensive Nuclear-Test-Ban Treaty Organization.
Every Layer of Trust
Bergqvist protects the identity people use to prove who they are online. Vlootman secures the platform that many banks build their digital services on. Moura and Attridge protect commercial banks’ systems and the continuity of their services, and Amann secures the central bank behind the euro, including the work toward a digital euro. Together they cover the layers of trust that make banking without a branch possible.
Discover more CISOs securing their organizations:
-
- Securing the Physical Economy: Europe’s Industrial Cyber Leaders to Watch
- Ready Before It Happens: New Zealand’s Cyber Readiness Leaders to Watch
- Protecting the Mission: Australia’s Not-for-Profit Cyber Leaders to Watch
- Behind the Deputy Title: The Deputy CISOs to Watch
- More Than Security: The CISOs Whose Titles Include Privacy, Identity and Technology Risk
John Kevin Hao is a news and feature writer covering cybersecurity, technology, and business targeted for professional audiences.