Senior Information Security Manager

📋 Description

• Governance, risk and compliance lead for global ISMS.
• Design and mature global GRC aligned with ISO 27001, NIST, GDPR, DORA.
• Own risk management lifecycle; quantify and communicate risk to stakeholders.
• Lead external audits; oversee remediation across multiple jurisdictions.
• Lead Third-Party Risk Management standards for vendor security.
• Monitor regulatory landscape and map proactive compliance roadmaps.

🎯 Requirements

• 5+ years of experience in Information Security, GRC, or Risk Management.
• Strong knowledge of ISO 27001, SOC 2, GDPR, FCA/DORA, NIST, etc.
• Analytical skills to assess Security Exceptions and audits; regulator interactions.
• Hands-on risk management, control frameworks, security metrics; OneTrust.
• Team player with exceptional communication and stakeholder management.
• Certs: CISSP, CRISC, CISA, or ISO 27001; Lead Implementer/Auditor preferred.

🎁 Benefits

• Dedicated mentorship from experienced managers.
• Cutting-edge technology and tailored tools to perform at your best.
• Clear, accelerated career progression paths within Ebury.
• Dynamic and supportive culture focused on teamwork and growth.
• Generous benefits package including health care and social benefits.
• Central Madrid Office with excellent transport links.