Ebury

1 month ago

Senior Information Security Manager

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 3 hours agoStatus: Live

Job Summary

Lead global governance, risk, and compliance for a fintech scale-up. Architect and mature the GRC framework, drive external audits, manage third-party risk, and monitor regulatory developments to enable secure international expansion while partnering with business teams and regulators.

Location: London, Madrid

Workplace: Hybrid

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Sr. Manager level

Key Responsibilities

•Own and lead the Governance, Risk, and Compliance (GRC) program, ensuring an audit-ready ISMS and alignment with business goals.
•Design, implement, and mature the global GRC framework across ISO 27001, NIST, GDPR, and DORA, collaborating with multiple teams.
•Oversee risk management lifecycle, quantify risk, and communicate findings to business stakeholders to inform decisions.
•Lead external audits as primary liaison, manage remediation of findings and maintain compliance across jurisdictions.
•Mature Third-Party Risk Management (TPRM), define vendor security standards, and ensure partners meet risk appetite.

Pay and Benefits

Perks:Health InsuranceSocial Benefits

Key Requirements

•5+ years of experience in Information Security, GRC, or Risk Management roles.
•Strong knowledge of information security standards and regulations (ISO 27001, SOC 2, GDPR, FCA/DORA, NIST, etc.).
•Analytical skills with experience in regulatory audits and communicating risk to business stakeholders.
•Hands-on experience implementing risk management processes, control frameworks, and security metrics; familiarity with GRC platforms (e.g. OneTrust).
•Excellent communication and stakeholder management; CISSP, CRISC, CISA, or ISO 27001 Lead Implementer/Auditor are preferred.

Experience:5+ yearsFintechInformation securityGRCRisk managementRegulatory compliance

Skills:CommunicationStakeholder managementTeam player

Certifications:CISSPCRISCCISAISO 27001 Lead Implementer/Auditor

Languages:English

Tech Stack:ISO 27001NISTGDPRDORAOneTrustGRCRisk management

Company Brief

Ebury

Provides international payments, FX, and treasury solutions for SMEs and mid-market companies, enabling cross-border transactions, multi-currency accounts, and financing services to support global trade and cash flow management.

Industry: Payments

Company Size: Enterprise (1,001+ employees)

Growth: Established Company

Funding: Private Equity Backed

Headquarters: London, United Kingdom

Founded: 2009

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

Ebury

1 month ago

Senior Information Security Manager

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 3 hours agoStatus: Live

Job Summary

Location: London, Madrid

Workplace: Hybrid

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Sr. Manager level

Key Responsibilities

•Own and lead the Governance, Risk, and Compliance (GRC) program, ensuring an audit-ready ISMS and alignment with business goals.
•Design, implement, and mature the global GRC framework across ISO 27001, NIST, GDPR, and DORA, collaborating with multiple teams.
•Oversee risk management lifecycle, quantify risk, and communicate findings to business stakeholders to inform decisions.
•Lead external audits as primary liaison, manage remediation of findings and maintain compliance across jurisdictions.
•Mature Third-Party Risk Management (TPRM), define vendor security standards, and ensure partners meet risk appetite.

Pay and Benefits

Perks:Health InsuranceSocial Benefits

Key Requirements

•5+ years of experience in Information Security, GRC, or Risk Management roles.
•Strong knowledge of information security standards and regulations (ISO 27001, SOC 2, GDPR, FCA/DORA, NIST, etc.).
•Analytical skills with experience in regulatory audits and communicating risk to business stakeholders.
•Hands-on experience implementing risk management processes, control frameworks, and security metrics; familiarity with GRC platforms (e.g. OneTrust).
•Excellent communication and stakeholder management; CISSP, CRISC, CISA, or ISO 27001 Lead Implementer/Auditor are preferred.

Experience:5+ yearsFintechInformation securityGRCRisk managementRegulatory compliance

Skills:CommunicationStakeholder managementTeam player

Certifications:CISSPCRISCCISAISO 27001 Lead Implementer/Auditor

Languages:English

Tech Stack:ISO 27001NISTGDPRDORAOneTrustGRCRisk management

Company Brief

Ebury

Industry: Payments

Company Size: Enterprise (1,001+ employees)

Growth: Established Company

Funding: Private Equity Backed

Headquarters: London, United Kingdom

Founded: 2009

Website LinkedIn