Accounting

Account Management

Admin

America Sales, LATAM

Back-End

Business Intelligence

Business Systems

London

Customer Success Manager

Commercial

Commercial Finance

Compensation and Benefits

Content

Contract Management 

Controlling

Corporate Legal

Customer Support

Data Analysis

Data Protection

Tallinn, Tartu, Barcelona

Senior Python Engineer

Staff Python Engineer

Data Science

DevOps

Digital Identity

Digital Marketing

Document Research

Enablement

Data Scientist

Tallinn, Tartu

Head of Data Insights

Senior Data Scientist

Senior Engineering Manager

Engineering

Events

Finance

Fraud Operations

Front-End 

Full-Stack 

HGSA Sales Team

Information Security

Internal Communications

IT Support

Learning and Employee Experience

Legal

Legal Advisory

Machine Learning

New York, London

Vice President of Marketing

Marketing

Marketing Operations

Mobile Development 

Partnerships

People

People Operations

Brazil, Colombia

Lead Growth Product Manager - LatAm

Product

Product Design

Product Management

Product Marketing

Quality Assurance

Quality Engineering 

Recruitment

Regulatory Compliance

Revenue

Tallinn, Tartu, Barcelona, London

Senior Marketing Operations Manager

Revenue Operations

Sales Development

New York

Account Executive

Senior Account Executive (EMEA)

Sales (EMEA, Americas)

Solutions 

Verification

Verifications

Workplace

No Department

Carl-Ruuben Soolep

Happy Cybersecurity Awareness Month! Paul Lee, Veriff's Chief Information Security Officer, gives his view on the current cybersecurity threat landscape and how organizations can stay one step ahead in an evolving world where generative AI and sophisticated attacks are becoming the new normal.

None

Paul Lee, Veriff's Chief Information Security Officer, shares insights on the evolving cybersecurity landscape, generative AI, and advanced threats.

Paul Lee | Current Cybersecurity Threat Landscape | Veriff.com

Before jumping to cybersecurity topics, please tell us how you learned about Veriff and what drew you to the company.

Absolutely! Before joining Veriff, I was a Chief Information Security Officer at Uphold, a Veriff customer. We were testing Veriff's fraud prevention capabilities and were impressed with it. So, I was already familiar with the company and some people due to that. While working in the security space, I had always been interested in the identity side of it because I believe that identity is the root of all, good or ill. So, when the opportunity arose to join, I decided to scratch that itch.

Please share a little about your background and previous experience. How did you end up in the IT and security field? Has it always been something you have been passionate about?

I started at a wholesale supplier to what you'd now call dollar stores, which itself had a complex web of suppliers for all the products that end up in those stores. My role primarily involved assessing products, seeing how we could put them in our little catalog, and then distributing them to stores across the UK. While there, I noticed certain inefficiencies. An example I saw was entirely manual processes to do stock-taking. It was done by hand, and there was a horrendous trail of paper reconciliations with all the associated and unavoidable errors. There was scant automation and certainly not much computerization. So, together with a colleague, we gradually computerized certain processes in that firm. Looking back, it seems strange that they were so limited in their use of computers. They did have them, but primarily for basic tasks like mail merges. At that point, I really enjoyed this process of digitization. I went on to pursue higher education in that field, essentially finding my niche.

You have extensive experience in the field from notable and well-known businesses, including crypto, greentech, and video gaming. What are some of the most valuable takeaways from working at those companies?

People are the most valuable assets because of what they bring with them. They are the collection of all the experiences and challenges they've overcome in their lives until the moment they stand before you, and they are easily our greatest asset. They will come up with new ideas and angles, and especially in a group setting, often help create solutions that will shape the company's course. 

For me, people are the champions of the vision I'm trying to promote. Building consensus and alignment is crucial, even though it may sometimes require change and adaptation, which can be challenging. Ultimately, it's about winning hearts and minds for a shared vision.

What are some of your priorities and goals for Veriff?

There are lots of interesting projects going on here. My goal is to ensure that the team is running smoothly and that we can measure the effectiveness of our systems inside and outside the company.

What's super interesting is that in our infosec team and work, we have to consider the confluence of cyber and physical security since we have our in-house verification operations. So, my job is to ensure that the control framework is adequately suited and positioned to measure what matters in terms of security telemetry, giving us visibility when needed.

October is Cybersecurity Awareness Month. With the cyber threat landscape constantly evolving, what are the most pressing cybersecurity challenges organizations face today, and how should they address them?

Not a major surprise here, but generative AI, I would say. There have been so many data breaches that have occurred around the world, exposing databases filled with valuable and rich veins of information. This does not just mean a threat against the people within those databases. Still, it also impacts the ways of doing business, targeting methods and the types of data collected for all kinds of purposes. Illicit AI models can now use these data sources to make predictions and target individuals in ways we have never seen before. I believe that a stochastic kind of interpretive probing and modelling is really going to feed the next phase of attacks.

In the past, hacking or theft attempts were often aimed at pinpointing vulnerabilities in a person's digital life. However, with the rise of AI, human limitations on focusing solely on one idea at a time are now a challenge. Now, we will have these more distributed attacks using the mined data, and we will have to work together to figure out ways to protect our customers. No doubt using AI to do so. In some ways, it feels inevitable that the biggest threat becomes the most effective defense. There's poetry in there somewhere.

An example could be enumeration attacks that can identify users across platforms, using all those data points in a single attack without needing a human involved. Machines can orchestrate and execute these super-targeted attacks, making it even more essential for companies to cooperate and share information. As AI-related risks intensify, there may be calls for increased surveillance, potentially impacting data sovereignty.

In response to this trend, there might be a push towards enhancing individual data sovereignty through tools and secure browsers, allowing people to regain control over their data. This could ultimately challenge the prevailing monetization models employed by tech companies, leading to a shift where individuals hold more power over their data. This complex challenge is finding an oft-debated balance between security and data ownership.

"With the rise of AI, human limitations on focusing solely on one idea at a time are now a challenge. I think now, we will have these more distributed attacks using the mined data, and we will have to work together to figure out ways to protect our customers. No doubt using AI to do so. In some ways it feels inevitable that the biggest threat becomes the most effective defense."

How can organizations use AI to their advantage to respond to these challenges?

In the past, the responsibility of identifying and mitigating threats fell on IT and InfoSec teams, often operating somewhat independently from the rest of the company. However, the threat landscape has evolved significantly, especially in the context of SaaS platforms, which make up the bulk of the tools that organizations use today. These systems and tools are always accessible, providing attackers an 'always-on' opportunity to exploit whatever vulnerabilities exist.

As a response to this, specialized services such as DDoS prevention, Web Application Firewalls (WAFs), identity and access management, and proxying services have crawled out of their own primordial mud. There is a constellation of services vying for your budget, and I think centralized logged and AI-driven security orchestration is a predictable next step. 

Choosing the right vendors becomes more and more crucial since if they can't play nicely with others, they and you will be a softer target for the newer generation of attackers. So when you are choosing vendors, you have to ask them questions and make them prove to you that they are ready for this next wave of attacks and speak the same language of shared intelligence.  

Specifically, in the case of protecting people from phishing attacks, technology companies like Microsoft and Google will have to get smarter at interpreting what an email intends to do. I would like to see the email kind of attacks going away, but due to a combination of ubiquity and the way the technology was designed, I can't see that in the next few years.

People cannot fight this fight alone. Businesses must select vendors who can cost-effectively limit their risk. However, navigating the landscape can be challenging as many vendors claim to incorporate AI in their solutions. By the dictionary definition, they may be right. Still, they're certainly being disingenuous about it. Partnering with strong, reliable resellers with their own long-term agenda to keep you happy can be a strategy to limit risks for newer firms, who may have less capability to spot fraud.

"People cannot fight this fight alone. Businesses must select vendors who can cost-effectively limit their risk. Partnering with strong, reliable resellers with their own long-term agenda to keep you happy can be a strategy to limit risks for newer firms, who may have less capability to spot fraud."

Looking ahead, what emerging trends and technologies do you see shaping the future of cybersecurity, and how should organizations prepare for these developments?

Each industry is going to have to behave differently because there's a different risk appetite. For example, the financial sector tends to have a low-risk appetite. Still, it relies on more traditional processes, while startups and SaaS platforms are trying to automate as much as possible. Coming through a lot of startups, I saw the rise of the aggregated log interrogation techniques developing into security staples, like SIEMs (security, incident and event monitoring), which bred SOAR (security, orchestration, automation and response) workflows, which are super helpful in the security space because they allow monitoring and responding to threats found in large datasets. SIEMs will likely need to accommodate greater volumes of data to detect multi-modal attacks that extend beyond conventional security and networking tools and in ways that are dynamically building their understanding of what a 'threat' is in a given context.

I see greater collaboration within organizations is one of the best forms of defense, but it is hard to do. There are divisional barriers, fiefdoms, disparate systems and control planes. That's why I come back to the people aspect I mentioned earlier - you need to pitch that idea and get people on board to be able to work together. AI-powered tools, particularly those focused on data mining, will become valuable in bolstering security measures for organizations across industries.

Any podcast/book recommendation for anyone reading this and getting more interested in the topic?

The first one that comes to mind is Unsupervised Learning by Daniel Miessler, a security, AI, and meaning-focused podcast that looks at how best to thrive as humans in a post-AI world.

To find out more about how Veriff’s fraud prevention solutions can help you address the threat to your business from bad actors, visit our Fraud Education Center.

Get more details

Paul Lee: “The biggest threat becomes the most effective defense”

Veriff

Our People

We are thrilled to announce Mike O'Callaghan as Veriff's new Vice President of Verifications. Mike is an operator and leader with over 30 years of experience scaling global operations and business support functions, including customer services, contact center management, and technologies. Mike has worked for the world's leading tech companies, including Amazon, Microsoft, Expedia, eBay, Skype, and more.

Meet Mike O’Callaghan, Veriff’s Vice President of Verifications

Welcome to the team, Mike! Can you tell us a little bit about how you learned about Veriff and what drew you to the company?

Thank you so much. It’s great to be working with such a welcoming group of people. I’ve been tracking Veriff for several years and  was drawn to  the company because of their industry-leading product offerings, world-class leadership, and ambitious plans for hyper-growth with elegant and efficient scaling. In addition, I feel very aligned with the company’s culture, values and mission to “make the internet a safer place, whilst being utterly transparent.” Everyone I met during the hiring process reinforced the strength of the culture, the alignment to Veriff’s mission and goals, and lastly, the strength of the team.    

Can you share a little about your background and previous experience?

My experience expands across multiple industry sectors including SaaS (B2B) technology, FinTech/FinCrime, eCommerce/retail, online travel, business process outsourcing, telco/broadband and retail/digital banking. I’ve been fortunate to work for some of the world’s largest tech companies and world-renowned brands in the last 25 years. I started my career in retail banking (way back in the late 1980’s) and I was proud to be involved in the launch of the first full UK internet/digital bank in 2000! I’ve enjoyed opportunities to work all around the UK and Ireland, live and work in Luxembourg for 5 years, and run operational teams in over 30 countries! The biggest privilege, from operating all around the world, has been the opportunity to travel, learn different languages, and experience so many rich  and diverse cultures. Operations is a people business and I’ve loved the opportunities to connect with so many throughout my career.

You have worked at some of the most well-known companies in technology today like eBay, Amazon, Skype, and others. What are some of the most valuable takeaways from working at those companies?

I’ve been fortunate enough to work for some incredible global tech companies, where I learned the importance of relying on facts and data to drive decisions at a high velocity. In fast-paced, dynamic, and complex businesses (often growing exponentially), having a clear mission and priorities married to data and facts allows one to make decisions quickly. These global platforms and recognizable brands all have multiple things in common: powerful missions and purpose linked to a strong culture and customer or service obsessions delivered through product innovations that remove friction and ensure trust in services we all want, need, and use every day in our lives. Looking back, I’ve been attracted to companies that try to solve the most challenging technology problems affecting the whole planet and its inhabitants. Often these companies are in hyper-growth mode, with massive user and transaction volumes and scale, while ensuring the products and services are “user friendly” and add value to people’s lives. For my part, I’ve learned that people are the most valuable assets and often make the biggest difference in achieving success!     

You have seen the identity space evolve and grow from quite close. How did you end up in the identity space in the first place? What do you see are some of the key trends in the space at the moment?

I stumbled into the identity space because of my background in running and scaling global operations that supported a technology platform. Identity was still quite a young and emerging industry, but the previous experience of supporting an “always on” (24/7/365) service was transferable. Some key emerging trends within the sector are digital or re-usable identities and industry-wide standards and definitions being created and adopted. Also, how “know your customer” (KYC),  “anti-money laundering” (AML), and fraud prevention/fighting financial crime all intersect, often via multiple or complementary technology solutions, that will all need coordination or orchestration while ensuring high conversion for services, no friction for end users, and privacy protection.  

I feel very aligned with the company’s culture, values and mission to make the internet a safer place, whilst being utterly transparent. Everyone I met during the hiring process reinforced the strength of the culture, the alignment to Veriff’s mission and goals, and lastly, the strength of the team.    

You joined the team as Vice President of Verifications. Can you tell a little bit what the verification division does and is responsible for at Veriff?

As VP of Verifications, I am responsible for the “24/7/365” operations, knowledge management, support and development, and service planning and delivery of Veriff’s verification solutions. The extremely versatile and agile team’s talent, expertise, and experience provide “human in the loop” signals and inputs for our automated decision-making, as well as gathers, analyzes, structures, and maintains Veriff’s in-house knowledge related to identity documents and registries in line with international standards. We support new client testing and incubation groups with revenue, account management, and solutions engineering teams to ensure a smooth and successful onboarding and “go-live” process for new clients. Lastly, we collaborate with regulatory compliance, product and engineering, and quality management functions to achieve Veriff’s business objectives.

What are some of your priorities and goals for Veriff’s verification division?

One of my priorities and goals for the verification division is to take a step back and ensure strong connections with the company’s mission, growth mindset and promise to make the internet a safer place while handling millions of individual transactions. I am excited for the division to evolve and grow with “follow the sun” operations that offer resiliency, agility, and support for new market expansions (country, languages, and forms of identification). As always, we aim to support our customers and ensure a high conversion while mitigating fraud or losses by providing a high-quality and highly accurate expedient service.

Aside from your work here at Veriff, what are some of your other commitments and passion-projects you are currently working on?

One passionate project I’m working on is acquiring a new self-sufficient 4x4 motorhome (in the US, they call them RVs) built with a composting toilet, no LPG gas onboard, and electricity provided by solar panels, lithium batteries, and an inverter!  I’m also excited about finding a non-profit to get involved with so that I can assist in using my wide experience and skills.

One thing that surprised you about Veriff?

The leadership, teams, and the company culture! Everyone has a passion for the mission; it’s clearly in the company’s DNA.

My must-read book is “The Five Dysfunctions of a Team” by Patrick Lencioni.  It’s written as a fable and is very relevant to technology start-ups and newly formed or fast-changing teams.  

Best piece of advice you have received to date?

“It is not what you say, nor wish, nor hope, nor intend….it is only what you do that counts.”

Veriff is once again taking part in the Educational Leaders’ Internship Program in Estonia, and we’re pleased to welcome headteacher Mari Roostik on board. We had a chat with Mari to see how the internship has been going so far, her thoughts on education and much more.

Meet Mari Roostik, a headteacher turned Veriff intern

Welcome to the team, Mari! Tell us a little about yourself.

I am originally from a town called Rakvere in Estonia, where I lived until I finished high school. Not a strictly straight-A student, but I was eager to organize events in my school, tried to make all my peers act and dance since that was what I liked, and tried to do everything that was not studying besides reading and writing. I have always loved it!

I got my BA and MA degrees from the University of Tartu, where I studied Estonian language and literature teaching. For the past five years, I have been focusing on reading and learning as much about education, leadership, and how to be the best partner and leader to my team and students, so what you do indeed is who you are – I am a learner and reader, for 1,5 years a head teacher. It has been an exceptional journey, and it still is!

You work as a headteacher in a school in Tartu, Estonia. Tell us a little bit about your school. 

I work as a headteacher at Tartu Jaan Poska Gymnasium, established as a secondary school in 2011. We have about 540 students and a team of teachers and staff of around 45 people. 

Our school’s main priority is offering each student an individual learning experience that helps them connect between subjects and use their creativity to the fullest. We do everything possible to ensure every student flies to the world with the best knowledge, positive attitude, and skills to chase their dreams.

An interesting fact about the school is that it is housed in a historical building where on February 2, 1920, the Tartu Peace Treaty between Estonia and Soviet Russia was signed, marking the end of the Estonian War of Independence.

Have you always wanted to work in the education field?

I am not 100% sure that I have always wanted to work in education, but I have always wanted to work with people. Today I know I am in the right field and live and breathe making a difference in education.

I have worked in education for over 11 years. I started as a teacher and thought those first years gave me knowledge and understanding of the profession. Working with students was and still is a beautiful experience. Still, I knew I had to choose between becoming an exceptional teacher or striving to become a leader in education. I chose the latter and worked a lot to be worthy of deputy principal, and after that, I knew that the next goal was to try to reach the role of headmaster. And here I am, a headmaster, still working harder than ever to make a difference for my team and students.

What do you love most about your work as a headteacher? What are the challenging and most rewarding parts of your work?

That is a tough one because I love all of it (almost). It comes with a huge responsibility and many challenges. I love how we, as a school team, share the same vision of what and how we want to achieve for our students. We cannot just teach them as we always have; we have to change and sometimes rethink how we think about our roles and responsibilities as teachers. 

Right now, a big part of my work is to lead many changes simultaneously and ensure that everybody in our team understands why we are doing it, how we will grow and benefit from the hard work we put in, and where we are heading. Leading changes and doing some things differently is always as rewarding as challenging.

My first four weeks in Veriff have been unique, eye-opening, exhausting, but amazing! People in Veriff are warm and welcoming, brilliant, and the best in their fields. That is probably my favorite part so far.

How have your first weeks at Veriff been?

My first four weeks in Veriff have been unique, eye-opening, exhausting, but amazing! First, two weeks passed like a blink of an eye since I did two onboarding sessions – company and new team leadership training. 

I had forgotten what intensive learning is and how exhausting it is, but I am so glad that I had the opportunity to remind myself of that. I know now what all my first-year students and new teachers feel when they start in our school. Of course, it also gave me many ideas on how to make it easier and more efficient and structure information more precisely, step by step, just like you do in Veriff. There will likely be a new onboarding program for new students and teachers in our school next fall. 

I have had many inspiring 1:1 conversations. People in Veriff are warm and welcoming, brilliant, and the best in their fields. That is probably my favorite part so far.

Photo: Mari's first day interning at Veriff

Why did you decide to join the internship program?

Many headteachers whom I admire have taken part in the program. I have seen the sparkle in their eyes, and it seemed like the only way to get myself to accomplish some of the more complex and fundamental route changes I dreamt of creating in my school. And as I said before, I am eager to learn, so I decided in spring 2022 to apply when the new opportunity comes next!

Photo: Indrek Heinloo (COO, Mari's mentor), Mari Roostik (headteacher at Tartu Jaan Poska Gymnasium), Pilleriin Pillav (People Partner, Internship Coordinator)

Any goals you set yourself for the program?

One of my goals is to learn about data, what to and when to collect, when our why is set, what are the different tools to do it quickly and efficiently, in which areas it is the foundation of decision making, how to monitor and analyze it etc. Of course we are already doing it and have been doing it, but I know that there are more ways to use data to observe, if we really are moving in the right direction with our strategic plans and OKRs (to know and learn more about them is also an important goal for me)  for this and upcoming years. 

What are some of your personal interests or hobbies outside of your professional life that you would like to share?

I love to read a lot, discover new music, walk a lot, and occasionally go to the theater, concerts, and exhibitions and enjoy spending time and just talking with my friends and family. I work out almost every day, wake up too early for most of the population, and write a lot. 

And a fun fact about myself is that I have a plan for everything, not only for work but for everything in my personal life as well.

The Educational Leaders’ Internship Program was initiated by the Good Deed Education Fund and Tallinn Education Department in collaboration with the talent agency Fontes. This year, fifteen school leaders from across Estonia have become interns at Estonian companies with top-level managers as their mentors. The 10-month program aims to develop the quality of school management and give the school leaders insights into the organisation's daily and operational model with a modern management culture. For the first three months the school leaders will work full-time in the companies and then return to their schools to take the knowledge and ideas into practice with the help of their mentors.

Find your role

Sorry, we couldn’t find any open roles matching your search

Showing open roles

Didn’t find a role?

Want to learn more?

Paul Lee: “The biggest threat becomes the most effective defense”

Meet Mike O’Callaghan, Veriff’s Vice President of Verifications

Meet Mari Roostik, a headteacher turned Veriff intern

Products

Solutions

Resources

About