Hybrid opportunity at
EburyInformation Security Manager
Ebury is seeking an Information Security Manager to join its global Information Security team, reporting directly to the Chief Information Security Officer. This hybrid position requires…
Career Tools
About This Role
Ebury is seeking an Information Security Manager to join its global Information Security team, reporting directly to the Chief Information Security Officer. This hybrid position requires working four days in the Leon office and one day from home per week. Founded in 2009, Ebury is a fast-growing fintech company that provides integrated financial solutions—such as business accounts, hedging, and financing—on a single platform to help companies scale globally. The firm…
Job Description
Ebury is seeking an Information Security Manager to join its global Information Security team, reporting directly to the Chief Information Security Officer. This hybrid position requires working four days in the Leon office and one day from home per week. Founded in 2009, Ebury is a fast-growing fintech company that provides integrated financial solutions—such as business accounts, hedging, and financing—on a single platform to help companies scale globally. The firm employs over 2,000 staff members across nearly 70 cities.
This hybrid role combines hands-on governance and compliance duties with client-facing responsibilities. The successful candidate will act as the primary security subject matter expert for commercial teams, managing customer assurance requests, security questionnaires, and client discussions. Additionally, the individual will maintain security frameworks, oversee the Information Security Management System, manage vendor risk, and support external audits and regulatory engagements.
This position suits an experienced security professional with a commercial mindset who can balance risk management with business growth objectives. The incumbent will help Ebury build trust, enter new international markets, and launch new products securely.
Responsibilities
- Act as the security point of contact for Sales, Account Management, and Product teams to support client onboarding and security reviews
- Complete security due diligence questionnaires, RFPs, and assurance requests from current and prospective clients
- Build and maintain a central repository of security evidence, certifications, and approved responses
- Participate in client and prospect calls to explain security postures and controls to technical and non-technical audiences
- Advise on the regulatory and security impacts of international expansion and new product introductions
- Lead annual updates to security policies and standards to align with regulations like GDPR, ISO 27001, SOC 2, PCI DSS, and NIST
- Plan and execute the internal audit schedule for the Information Security Management System and track remediation efforts
- Coordinate external audits, manage assessor logistics, and respond to regulatory inquiries
- Evaluate supplier and vendor risk through security reviews and due diligence questionnaires
- Manage the security exception lifecycle by reviewing requests, assessing risks, and enforcing formal sign-offs
- Automate manual governance tasks using GRC platforms and map internal controls against emerging regulations
Requirements
- Over 5 years of professional background in information security, risk management, or GRC, preferably within fintech or financial services
- Demonstrated experience completing customer security questionnaires, RFPs, and supporting pre-sales teams
- Comprehensive understanding of security standards and regulations including ISO 27001, SOC 2, PCI DSS, GDPR, NIST, and DORA
- Experience planning or participating in internal, external, or regulatory financial audits
- Analytical capability to quantify risk rather than simply issuing rejections for exceptions
- Practical background in setting up risk management frameworks and security metrics
- Familiarity with GRC tools such as Vanta, OneTrust, or Drata
- Excellent communication skills with the ability to present to executives, clients, and technical staff
Qualifications
- Professional industry certifications including CISSP, CRISC, CISA, or ISO 27001 Lead Implementer/Auditor
- Background working in a customer-facing or trust and assurance capacity
- Familiarity with questionnaire automation software or trust centers
- Experience navigating multi-jurisdiction expansion and regional regulatory requirements
- Proficiency in Spanish or another European language alongside fluent English
Core Skills
Benefits
- Competitive starting salary alongside an annual discretionary performance bonus
- Dedicated mentorship from experienced managers
- Access to tailor-made, cutting-edge technology and systems
- Clearly defined pathways for career progression into leadership and specialist tracks
- Comprehensive benefits package tailored to the job location, typically featuring health care and social benefits
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
What is the remote work policy for this role?
This is a hybrid position requiring four days in the Leon office and one day working from home per week.
Who does the Information Security Manager report to?
This position reports directly to the Chief Information Security Officer.
What experience is required for this position?
Candidates must have at least five years of experience in information security, risk management, or GRC roles, ideally within regulated financial environments or fintech.
What is the salary for this job?
The specific salary amount is not stated in the job posting, though the role offers a competitive starting salary with an annual discretionary performance bonus.
How should candidates apply for this opening?
Applicants should use official Ebury channels to apply, as the company notes it only accepts applications through its authorized platforms.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.