ppEbury helps ambitious businesses unlock integral growth, and we take the same approach with our people. We encourage innovation and movement, collaboration and problem‑solving, and foster an environment where everyone can feel they belong, are valued, supported and empowered to succeed. /p pIf you’re a collaborator who wants to help transform how businesses operate globally, get in touch - we’d love to discuss how Ebury can accelerate your career so you can shape the future. /p h3Senior Information Security Manager /h3 pEbury Madrid Office - Hybrid: 4 days in the office, 1 day working from home per week /p pEbury is seeking a high‑caliber Information Security GRC Manager to spearhead our global governance, risk, and compliance initiatives. This role is for a seasoned professional who thrives on owning programs rather than just executing tasks. You will act as the primary architect of our security frameworks, ensuring our ISMS is audit‑ready and serves as a strategic enabler for Ebury’s global expansion. You will be the bridge between technical security requirements and business risk, providing expert guidance on complex regulatory landscapes. /p pThis is an opportunity to be a strategic part of an experienced infosec team at a high‑growth fintech scale‑up. /p h3What you’ll do /h3 h3Governance Compliance (BAU) /h3 pbGRC Strategy Architecture /b: Design, implement, and mature our global GRC framework, collaborating with other teams to align it with ISO 27001, NIST, GDPR, and DORA. /p ul libRisk Management Lifecycle /b:



Own the risk assessment process – you will lead the quantification and communication of risk to business stakeholders to drive informed decision‑making. /li libAudit Ownership /b: Lead and manage external audits as the primary liaison. This includes overseeing the remediation of findings and ensuring we remain continuously compliant across multiple jurisdictions. /li libTPRM Leadership /b: Mature our Third‑Party Risk Management program. You will define the standards for vendor security and ensure high‑impact partners meet Ebury’s rigorous risk appetite. /li libRegulatory Horizon Scanning /b: Proactively monitor the evolving fintech regulatory landscape (e.g., EU AI Act, NIS2, regional cyber laws) and design the roadmaps to ensure Ebury remains ahead of the curve. /li /ul h3Strategic Projects Process Maturation /h3 ul libGRC Automation /b: Lead the selection and full‑scale implementation of automated GRC platforms to establish automation and robustness in GRC operations. /li libStrategic Advisory /b: Act as a high‑level consultant for new product launches and international expansions, ensuring "Security by Design" is baked into strategic business moves. /li libCultural Leadership /b: Design and champion advanced security awareness programs that focus on shifting organizational behavior through metrics‑driven insights.



/li /ul h3What you’ll need /h3 ul li5+ years of experience in Information Security, GRC, or Risk Management roles /li liStrong knowledge of information security standards and regulations (ISO 27001, SOC 2, GDPR, FCA/DORA, NIST, etc.) /li liAnalytical skills: Ability to assess a "Security Exception", experience with regulatory audits and working with financial regulators. /li liHands‑on experience implementing risk management processes, control frameworks, and security metrics. Familiarity with GRC or risk platforms (e.g. OneTrust). /li liTeam player with exceptional communication and stakeholder management skills. /li liIndustry certifications such as CISSP, CRISC, CISA, or ISO 27001. Lead Implementer/Auditor are preferred. /li /ul h3Why Ebury? /h3 ul libCompetitive Starting Salary /b with an bannual discretionary bonus /b that truly rewards your performance from day one. /li libDedicated Mentorship /b: Learn directly from experienced managers who are invested in your success. /li libCutting‑Edge Technology /b: Leverage state‑of‑the‑art tailor‑made tools and systems that enable you to perform at your best. /li libClear, Accelerated Career Progression /b: Defined pathways to leadership and specialist roles within Ebury. /li libDynamic Supportive Culture /b: Work in a collaborative environment where teamwork and personal growth are prioritized. /li libGenerous Benefits Package /b: Access competitive benefits tailored to your location, which typically include health care and social benefits. /li libCentral Madrid Office /b: A fantastic location with excellent transport links. /li /ul /p #J-18808-Ljbffr

📌 Senior Information Security Manager (Madrid)
🏢 Ebury
📍 Madrid