Allfunds is a leading general dealing and distribution platform in the wealth management industry. Distinguished by its buy-free model, the breadth of its distribution network, strong global and local execution capabilities, and value-added services, Allfunds has a longstanding track record of delivering growth, with AuA at a historic high of €1.76 trillion (as of 31 December 2025). Allfunds seamlessly connects end-to-end over 1,450 fund partners and more than 900 distributors across 66 countries. Channeling savings into investments, Allfunds offers a comprehensive suite of products including mutual funds, ETFs, and alternatives on a scalable technology platform. Allfunds has 17 offices in major financial hubs across four continents including Bogotá, Dubai, Hong Kong, London, Luxembourg, Madrid, Miami, Milan, Paris, Santiago, São Paulo, Shanghai, Singapore, Stockholm, Valencia, Warsaw, and Zurich. Allfunds is a truly global business with more than 1,000 employees and a culture of innovation and entrepreneurship. If you're adaptable, open to new opportunities, and enjoy working with diverse teams, Allfunds is the right place for you.

Responsibilities

- Leading, maintaining and continuously improving the Information Security Management System (ISMS) and cybersecurity governance framework.
- Maintaining information security policies, standards and procedures, ensuring appropriate governance, documentation and control.
- Establishing, maintaining and monitoring the Cybersecurity Strategic Plan, aligned with business priorities, regulatory requirements and the cybersecurity risk landscape.
- Leading the identification, assessment, treatment, acceptance and monitoring of information security and cyber risks.




- Ensuring cybersecurity risk assessments are performed for relevant systems, processes, technology changes, third parties and outsourcing arrangements.
- Providing cybersecurity regulatory support and ensuring alignment with applicable requirements, including DORA, EBA, CSSF, MAS, GDPR, ENS, ISO 27001 and NIST.
- Managing internal and external security audits, certifications and regulatory assessments, including the monitoring and remediation of findings and recommendations.
- Leading the cybersecurity component of Third-Party Risk Management, including security assessment, approval and ongoing monitoring of technology providers and outsourcing arrangements.
- Leading the Security Awareness Program, including general training and targeted campaigns based on specific risk profiles.
- Coordinating security-related privacy matters with the Data Protection Officer (DPO).
- Coordinating cybersecurity governance and assurance activities with the Second and Third Lines of Defence (2LoD and 3LoD).
- Defining and reporting cybersecurity KPIs and KRIs, providing management with visibility of risk, compliance, control effectiveness and remediation activities.
- Supporting customer security Due Diligence processes and security questionnaires.

Qualifications

- Bachelor's or Master's degree in Cybersecurity, Information Security, Computer Science, Engineering,



Risk Management or a related field.
- Minimum 7 years of experience in Information Security, Cybersecurity GRC, Technology Risk, Audit or Regulatory Compliance, preferably within financial services or another regulated industry.
- Strong knowledge of ISO 27001, NIST CSF, DORA, GDPR and ENS, together with experience in risk management, audit and third-party risk management.
- Relevant certifications such as ISO 27001 Lead Auditor/Implementer, CISM, CISSP, CRISC or CISA are highly valued.
- Strong leadership, analytical and problem-solving capabilities.
- Ability to translate cybersecurity and regulatory requirements into clear business risks, priorities and actions.
- Excellent stakeholder-management and communication skills, including interaction with senior management, auditors and regulators.
- Excellent written and verbal communication skills in English and Spanish.
- High level of autonomy, organization, attention to detail and ability to operate effectively in a complex international environment.

What We Believe In

All for Excellence We bring together our expertise, experience, and passion to deliver excellence in everything we do. By holding ourselves to the highest standards, we ensure that our clients, employees, and partners can always rely on us.

All for Accountability We take ownership of our actions and decisions, acting with transparency, integrity, and responsibility towards our colleagues, clients, and the communities we serve.

All for Empowerment We continuously evolve our tools, services, and ways of working to empower our clients and people, helping them succeed with confidence and efficiency.

All for Inspiration People a

📌 Head of GRC (Madrid)
🏢 Allfunds Bank
📍 Madrid