InfoSec & Compliance Manager

Ebury; León; Hybrid; EUR 90,000 - 130,000; Full time

Job summary

Ebury Leon Office is seeking an experienced InfoSec & Compliance Specialist to join our global Information Security function. The role combines maintaining ISMS and audits with acting as the security face to the business, supporting sales, customers, and new initiatives.

You will drive governance, respond to due diligence, and advise on regulatory impacts of expansions and new products, with security as a business enabler to win and retain customers.

Qualifications

• 5+ years of experience in information security, GRC, or risk management roles in regulated environments.
• Proven experience responding to customer security questionnaires, DDQs, and RFPs, supporting sales or pre-sales with security assurance.
• Strong knowledge of information security standards and regulations (ISO 27001, PCI DSS, SOC 2, NIST, GDPR, DORA, local regulations).

Responsibilities

• Act as the security SME for new business, supporting Sales, Account Management and Product through security reviews and onboarding.
• Own end-to-end responses to DDQs, RFPs, and assurance requests from customers.
• Build and maintain a central library of approved responses, certificates, and evidence (ISO 27001, SOC reports, PCI DSS attestation).
• Join customer calls as the security expert, explaining controls and posture to both technical and non-technical audiences.
• Advise on security and regulatory implications of international expansion, new products, and partnerships.
• Track recurring customer questions and feed trends to CISO and product teams to inform security strategy.

Skills

InfoSec governance

Security compliance

Customer security questionnaires

Tools

ISO 27001

PCI DSS

SOC 2

NIST

GDPR

DORA

Job description

Ebury Leon Office is seeking an experienced InfoSec & Compliance Specialist to join our global Information Security function. The role combines maintaining ISMS and audits with acting as the security face to the business, supporting sales, customers, and new initiatives.

You will drive governance, respond to due diligence, and advise on regulatory impacts of expansions and new products, with security as a business enabler to win and retain customers.