Opportunity at
EburyTechnical Governance Risk & Compliance Specialist
Ebury is looking for a Technology GRC Lead to operate from London. Founded in 2009, Ebury is a fintech company that provides global business accounts, financing,…
Career Tools
About This Role
Ebury is looking for a Technology GRC Lead to operate from London. Founded in 2009, Ebury is a fintech company that provides global business accounts, financing, and hedging solutions via a proprietary platform to help companies expand internationally. The organisation currently employs over 2,000 individuals spanning nearly 70 cities. In this position, you will serve as the primary liaison between the Technology department and oversight bodies like Compliance, Internal Audit,…
Job Description
Ebury is looking for a Technology GRC Lead to operate from London. Founded in 2009, Ebury is a fintech company that provides global business accounts, financing, and hedging solutions via a proprietary platform to help companies expand internationally. The organisation currently employs over 2,000 individuals spanning nearly 70 cities.
In this position, you will serve as the primary liaison between the Technology department and oversight bodies like Compliance, Internal Audit, and IT Risk. You will directly own the Technology Governance, Risk, and Compliance programme, manage risk registers, and represent the department at executive risk committees. This role suits professionals who want to oversee compliance postures, handle internal and external audits, and integrate risk priorities into the core product and engineering roadmaps.
Responsibilities
- Lead the Technology GRC programme to maintain the overall compliance posture and centralise risk metrics
- Manage and coordinate incoming audit, risk, and compliance inquiries across engineering and technology teams
- Administer the technology risk register in AuditBoard, keeping risk ratings and action plans updated
- Represent Technology at risk committees by delivering data-driven reporting on KPIs and remediation progress
- Execute internal and external audits from scoping and evidence gathering to remediation and closure
- Enforce remediation timelines across engineering teams and escalate delays to leadership
- Define and align the technology control framework with industry standards like ISO 27001, NIST, and CIS
- Author and manage the approval lifecycle for technology policies, standards, and standard operating procedures
- Collaborate with engineering teams during planning cycles to prioritize compliance tasks alongside feature work
- Implement automated control validation and continuous evidence collection with engineering teams
- Perform security and risk evaluations for technology vendors, software providers, and SaaS tools
Requirements
- At least 3 years of experience in IT or cybersecurity GRC, IT risk, or IT audit
- Background working within a regulated environment such as financial services or fintech
- Demonstrated history of independently leading technology risk programmes and audits
- Working knowledge of CIS, NIST, and ISO 27001 frameworks
- Familiarity with IT General Controls across change management, access management, and operations
- Technical familiarity with cloud environments like AWS, GCP, or Azure, as well as CI/CD pipelines, IAM, and secure SDLC
- Capability to present complex risk metrics to senior leadership and risk committees
- Written and verbal communication skills in English
Qualifications
- Hands-on administrative experience with GRC platforms such as AuditBoard
- Familiarity with SOC 2 Type II, PCI DSS, or DORA regulations and frameworks
- Experience with building automated compliance monitoring or evidence pipelines
- Industry certifications including CISA, CISM, CRISC, or ISO 27001 Lead Auditor
Core Skills
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Where is this role located?
The posting specifies the location as London.
What is the employment type?
The posting lists the employment type as full-time.
What is the salary for this position?
The salary is not stated in the job posting.
What experience is required to apply?
Applicants need a minimum of 3 years of experience in IT or cybersecurity GRC, IT risk, or IT audit, ideally within a regulated environment such as fintech or financial services.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.
