Information Security Manager
Core
Information Security Manager responsible for maintaining ISMS/compliance frameworks, acting as the security SME for sales and customers, and managing third-party risk.
Role type
Senior IC Information Security Manager (GRC & Compliance)
Builds
Security assurance libraries, automated response workflows, and risk management processes for a global fintech platform.
Domain
Fintech / Financial Services / Information Security
Required skills
Information security standards (ISO 27001, SOC 2, PCI DSS, GDPR, DORA), GRC platform experience (OneTrust, Vanta, Drata), internal/external audit management, third-party risk management, regulatory mapping, stakeholder management, commercial mindset
Preferred skills
CISSP, CRISC, CISA, ISO 27001 Lead Implementer/Auditor, trust centre experience, multi-jurisdiction expansion support, Spanish or other European languages
Technologies
OneTrust, Vanta, Drata, GRC platforms
Responsibilities
Lead annual ISMS policy reviews and internal audit programs; respond to customer DDQs and RFPs; manage third-party risk assessments; advise on security implications of international expansion and new products; coordinate external audits and regulator engagements; design security awareness programs.
Seniority
Senior, hands-on IC