Information Security Manager
Core
Information Security Manager responsible for maintaining ISMS, compliance obligations, and acting as the security SME for commercial teams to enable business growth.
Role type
Senior IC Information Security & Compliance Manager
Builds
Security frameworks, audit readiness, customer assurance libraries, and automated GRC workflows
Domain
Fintech / Financial Services / Information Security
Required skills
Information security standards (ISO 27001, SOC 2, PCI DSS, GDPR, DORA), GRC platform experience (OneTrust, Vanta, Drata), internal/external audit management, third-party risk management, regulatory mapping, security exception lifecycle management, customer-facing security assurance, risk quantification
Preferred skills
CISSP, CRISC, CISA, ISO 27001 Lead Implementer/Auditor, trust centre automation, multi-jurisdiction expansion support, Spanish or other European languages
Technologies
OneTrust, Vanta, Drata, GRC platforms
Responsibilities
Lead annual ISMS review and policy updates; manage internal and external audit programs; respond to customer DDQs and RFPs; advise on security implications of international expansion and new products; manage third-party risk assessments; design security awareness programs; map controls against new regulations (EU AI Act, NIS2, DORA)
Seniority
Senior, hands-on IC with strategic advisory