How a heavily regulated financial institution implemented Bug Bounty

A European financial institution's security expert recounts its bug bounty rollout, where a critical issue surfaced within an hour on an already pentested site, and why bounty complements pentests.