Ebury

2 days ago

Senior Information Security Manager

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 2 hours agoStatus: Live

Job Summary

Own and mature the company’s global governance, risk, and compliance (GRC) program, ensuring an audit-ready ISMS aligned to ISO 27001, NIST, GDPR, and DORA. Lead risk assessments and external audit remediation, drive Third-Party Risk Management standards, and scan regulatory developments affecting fintech. Select and implement automated GRC platforms and provide Security by Design advisory for product launches and international expansion.

Location: Madrid

Workplace: Hybrid

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Manager level

Key Responsibilities

•Design, implement, and mature a global GRC framework aligned with ISO 27001, NIST, GDPR, and DORA.
•Own the risk management lifecycle, including risk quantification and communication to business stakeholders for decision-making.
•Lead and manage external audits, owning remediation of findings and maintaining continuous compliance across multiple jurisdictions.
•Mature Third-Party Risk Management by defining vendor security standards and ensuring partners meet Ebury’s risk appetite.
•Select and implement automated GRC platforms and provide Security by Design advisory for new product launches and international expansions.

Pay and Benefits

Perks:Health Insurance

Key Requirements

•5+ years of experience in information security, GRC, or risk management roles.
•Strong knowledge of information security standards and regulations including ISO 27001, SOC 2, GDPR, FCA/DORA, and NIST.
•Experience assessing security exceptions and working with regulatory audits and financial regulators.
•Hands-on experience implementing risk management processes, control frameworks, and security metrics; familiarity with GRC/risk platforms (e.g., OneTrust).
•Team-focused stakeholder management and communication skills; relevant certifications such as CISSP, CRISC, CISA, or ISO 27001 (Lead Implementer/Auditor preferred).

Experience:5+ yearsFintech

Skills:Stakeholder managementCommunicationAnalytical thinkingProgram ownershipCollaboration

Certifications:CISSPCRISCCISAISO 27001

Languages:English

Tech Stack:ISO 27001NISTGDPRDORASOC 2FCAOneTrustEU AI ActNIS2

Company Brief

Ebury

Provides international payments, FX, and treasury solutions for SMEs and mid-market companies, enabling cross-border transactions, multi-currency accounts, and financing services to support global trade and cash flow management.

Industry: Payments

Company Size: Enterprise (1,001+ employees)

Growth: Established Company

Funding: Private Equity Backed

Headquarters: London, United Kingdom

Founded: 2009

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

Ebury

2 days ago

Senior Information Security Manager

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 2 hours agoStatus: Live

Job Summary

Location: Madrid

Workplace: Hybrid

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Manager level

Key Responsibilities

•Design, implement, and mature a global GRC framework aligned with ISO 27001, NIST, GDPR, and DORA.
•Own the risk management lifecycle, including risk quantification and communication to business stakeholders for decision-making.
•Lead and manage external audits, owning remediation of findings and maintaining continuous compliance across multiple jurisdictions.
•Mature Third-Party Risk Management by defining vendor security standards and ensuring partners meet Ebury’s risk appetite.
•Select and implement automated GRC platforms and provide Security by Design advisory for new product launches and international expansions.

Pay and Benefits

Perks:Health Insurance

Key Requirements

•5+ years of experience in information security, GRC, or risk management roles.
•Strong knowledge of information security standards and regulations including ISO 27001, SOC 2, GDPR, FCA/DORA, and NIST.
•Experience assessing security exceptions and working with regulatory audits and financial regulators.
•Hands-on experience implementing risk management processes, control frameworks, and security metrics; familiarity with GRC/risk platforms (e.g., OneTrust).
•Team-focused stakeholder management and communication skills; relevant certifications such as CISSP, CRISC, CISA, or ISO 27001 (Lead Implementer/Auditor preferred).

Experience:5+ yearsFintech

Skills:Stakeholder managementCommunicationAnalytical thinkingProgram ownershipCollaboration

Certifications:CISSPCRISCCISAISO 27001

Languages:English

Tech Stack:ISO 27001NISTGDPRDORASOC 2FCAOneTrustEU AI ActNIS2

Company Brief

Ebury

Industry: Payments

Company Size: Enterprise (1,001+ employees)

Growth: Established Company

Funding: Private Equity Backed

Headquarters: London, United Kingdom

Founded: 2009

Website LinkedIn