Listing Description

Information Security Manager - Fintech

Madrid Office - Hybrid: 4 days in the office, 1 day working from home

Ebury is a Global FinTech: we apply new technologies to enhance and automate financial services and processes. This allows small and medium-sized businesses to trade and transact internationally by eliminating boundaries related to more traditional. 

We're breaking down the barriers set by incumbent banks to accelerate cross border trade. Be part of our mission.

Are you ready to be an Eburian?

Ebury is looking to add a full-time, permanent, Information Security Manager to join our Security team in either our Malaga or Madrid offices.

Key responsibilities include

• Maintain and continual improvement of Ebury’s ISO27001 certification. 


• Preparation and planning of Control testing.


• Management and monitoring of Security Key Performance and Risk Indicators..  


• Production of periodic metrics for work with Partner bank. 


• Completion of management information support governance framework.


• Management of the Security Risk Register and associated treatment plans.


• Work with internal stakeholders to develop relationships and improve security culture and practices. 


• Review all documentation across the ISMS Policy Library (policies, procedures, standards and guidelines).


• Management of enquiries from external parties including security assessments and audit requests.


• Assistance and coordination of the Security Working Group. 


• Key stakeholder engagement with Ebury Technical team. 


• Maintain awareness of emerging trends, risks, regulatory requirements or standards.

Skills and requirements

• Academic qualifications (e.g. degree or MSc), or substantial work experience at a level demonstrating ability.


• Experience of leading an Information Security Management System. 


• Proficient understanding of security frameworks (e.g. ISO27001, NIST, CIS).


• Experience of conducting Information Security risk assessments and control testing.


• Ability to lead and contribute to culture change. 


• Proactive, self-motivated, and a team player.


• Good communication skills.


• Organised and attentive to details.


• Awareness of data protection legislation.
  
  

#LI-CD1