Piraeus Bank is Greece's largest financial institution, headquartered in Athens, with a customer base of approximately 4.5 million and a branch network of 368 locations across the country. The bank holds roughly 30 percent of the domestic loan market (€34.4 billion) and about 29 percent of deposits (€54.6 billion). Founded in 1916, it operates across banking and financial services, serving a significant share of the Greek economy's capital flows.
For security engineers, the threat surface here is substantial and concrete. A systemically important bank at that scale is a target: credential stuffing against millions of accounts, business email compromise aimed at treasury operations, fraud vectors embedded in payment processing, and the regulatory scrutiny that follows any breach. The attack surface spans retail banking portals, mobile channels, interbank settlement systems, and the sprawling branch network infrastructure. Greek financial institutions also operate under EU regulatory frameworks - PSD2, GDPR, DORA - that shape how security teams must architect controls, handle incident response, and manage third-party risk.
Piraeus Bank has signaled a strategic emphasis on digital innovation and sustainable growth, which in practice means expanding online and mobile capabilities while hardening them. Security work here involves defending real financial infrastructure with real stakes - not theoretical scenarios but systems that process billions in transactions. The scope covers identity and access management, fraud detection, network defense, application security, and compliance engineering, all operating within the constraints of a regulated, systemically critical environment.
