Senior Information Security Manager

📋 Description

• Governance & Compliance (BAU): maintain global GRC programs.
• GRC Strategy & Architecture: align with ISO 27001, NIST, GDPR, DORA.
• Risk Management Lifecycle: lead risk assessments and reporting to stakeholders.
• Audit Ownership: liaise with external audits and remediation.
• TPRM Leadership: define standards for vendor security.
• Regulatory Horizon Scanning: monitor evolving fintech regs; map roadmaps.

🎯 Requirements

• 5+ years in Information Security, GRC, or Risk.
• ISO 27001, SOC 2, GDPR, NIST, DORA knowledge.
• Analytical skills for security exceptions and audits.
• GRC platforms such as OneTrust.
• Team player with strong communication.
• Certs: CISSP/CRISC/CISA; ISO 27001 Lead/Auditor preferred.

🎁 Benefits

• Competitive starting salary with discretionary bonus.
• Mentorship from experienced managers.
• Cutting-edge technology and tools.
• Clear career progression.
• Dynamic, supportive culture.
• Central Madrid office with great transport links.