Information Security Manager - Fintech

As an Information Security Manager at Ebury, your responsibilities will include maintaining the ISO27001 certification, managing the Security Risk Register, conducting security assessments, and enhancing the overall security culture across the organization. You'll prepare control testing, oversee key performance indicators, and ensure compliance with regulatory requirements.

To qualify for the Information Security Manager role at Ebury, you should have a relevant academic degree or substantial work experience in information security. Proficiency in security frameworks like ISO27001 and experience in leading information security management systems are essential. Good communication and organizational skills are also critical.

Ebury fosters a positive security culture by encouraging collaboration among internal stakeholders, conducting regular training sessions, and promoting awareness of data protection legislation. As an Information Security Manager, you will play a key role in shaping these initiatives, helping to integrate security practices into everyday operations.

Ebury is recognized as one of the top European FinTech companies and offers a dynamic work environment that prioritizes innovation and teamwork. We believe in a diverse culture and provide opportunities for professional growth, making it a fantastic place for Information Security professionals to thrive.

The hybrid work model for Information Security Managers at Ebury typically involves four days in the Madrid office and one day working from home. This flexibility allows you to maintain a productive work-life balance while being part of a collaborative team atmosphere.

When answering this question, highlight your direct experience with ISO27001, discussing specific examples where you maintained or worked towards certification. Emphasize any leadership roles you played during audits or assessments.

Discuss your process for risk assessment, emphasizing how you evaluate the impact and likelihood of risks. Mention tools you use to prioritize effectively and how you communicate these priorities to stakeholders.

Explain how you engage employees through training, awareness campaigns, and regular updates on security protocols. Share specific initiatives that have successfully improved security practices within your past roles.

Detail the resources you use to stay updated on security trends, such as industry publications, conferences, and networking with other professionals. Mention any specific instances where your proactive approach helped mitigate a potential threat.

Select a project where you led the implementation of a security framework or policy. Discuss your objectives, how you executed the project, and the results achieved, focusing on the impact on the organization’s security posture.

Share details about your hands-on experience with security assessments, including how you planned and executed them. Discuss any tools or methodologies you used and what you learned from the assessments.

Explain your strategy for ensuring compliance with data protection laws, referencing specific regulations relevant to Ebury’s operations. Describe how you communicate these requirements to the team and ensure adherence.

Outline the steps you would take during a security breach scenario, from detecting the issue to coordinating a response. Discuss the importance of communication, impact assessment, and follow-up procedures.

Be prepared to speak about specific tools you have experience with, whether they are for risk management, monitoring, compliance, or incident response. Share how these tools have helped you manage security effectively.

Tailor your response to reflect your admiration for Ebury’s innovation in FinTech and its commitment to diversity and inclusion. Mention how you believe your skills align with Ebury's mission and culture, making you a great fit for the team.