Experteer Overview
Envíe su CV y cualquier información adicional requerida después de haber leído esta descripción, haciendo clic en el botón de solicitud.
In this role you enable business growth through robust information security and compliance. You will champion the ISMS and regulatory readiness while acting as the security expert for sales, product, and commercial teams. You’ll lead audits, third-party risk, and regulatory responses, and advise on expansions and new products to prevent security slowdowns. You’ll work cross-functionally to translate security posture into business confidence and growth in a integral fintech environment.
Compensaciones / Beneficios
• Act as the security SME for new business, supporting Sales, Account Management, and Product during security reviews and onboarding
• Own end-to-end responses to DDQs, RFPs, and assurance requests from customers
• Build and maintain a central library of responses, certifications, and evidence (ISO 27001, SOC, PCI DSS, pen tests) and automate workflows
• Join customer/prospect calls as security expert, communicating controls to both technical and non-technical audiences
• Advise on security/regulatory implications of international expansion, new products, and partnerships
• Lead annual ISMS policy review and ensure alignment with ISO 27001, PCI DSS, SOC 2, NIST, GDPR, DORA, and local laws
• Coordinate external audits, manage evidence gathering, and track remediation
• Support regulator inquiries and evaluate third-party risk through due diligence and security reviews




• Manage security exceptions lifecycle including risk assessment and formal sign-off
• Drive process maturation and automation to replace manual BAU tasks via GRC platforms like OneTrust, Vanta, Drata
Responsabilidades
• 5+ years in information security, GRC, or risk management, preferably in fintech or regulated environments
• Proven experience responding to customer DDQs and RFPs and supporting sales/security assurance
• Strong knowledge of ISO 27001, SOC 2, PCI DSS, GDPR, NIST, FCA/DORA and related regulations
• Experience running internal and external audits and working with financial regulators
• Analytical ability to quantify risk in security exceptions and drive remediation
• Hands-on experience implementing risk management processes and security metrics
• Familiarity with GRC platforms (OneTrust, Vanta, Drata) xghoner
• Excellent communication and stakeholder management, with comfort presenting to customers, executives, and technical teams
• Commercial mindset balancing risk, deal timelines, and customer expectations
• Spanish and/or other European languages plus fluent English (preferred)
• Preferred certifications: CISSP, CRISC, CISA, ISO 27001 Lead Implementer/Auditor
• Experience in customer-facing or trust u0026 assurance roles
• Experience supporting multi-jurisdiction expansion and regional regulatory requirements
Requisitos principales
• competitive salary with annual bonus
• mentorship
• cutting-edge technology
• clear career progression
• dynamic and supportive culture
• generous benefits package tailored to location

📌 Information Security Manager (Madrid)
🏢 Ebury
📍 Madrid