InfoSec & Compliance Manager — GRC & Customer Assurance

Ebury; Madrid; Hybrid; EUR 70,000 - 110,000; Full time

Benefits offered by this job

Annual discretionary bonus

Mentorship

Central Madrid office with great comms

Job summary

Ebury Madrid Office is seeking an experienced InfoSec & Compliance Specialist to join our global Information Security function. This hybrid role focuses on keeping ISMS robust and acting as the security face to the business, supporting sales, customers and new initiatives.

You will lead governance, audits, and third-party risk, respond to customer due diligence, and advise on international expansions and product launches, making security a business enabler for growth.

Qualifications

• 5+ years of experience in information security, GRC, or risk management roles, ideally in fintech, financial services, or another regulated environment.
• Proven experience responding to customer security questionnaires, DDQs, and RFPs, and supporting sales or pre-sales teams with security assurance.
• Strong knowledge of information security standards and regulations (ISO 27001, SOC 2, PCI DSS, GDPR, FCA/DORA, NIST, etc.).
• Experience running or supporting internal and external audits, including regulatory audits and working with financial regulators.
• Analytical skills: assess security exceptions as quantified risk; implement risk management processes and security metrics.
• Familiarity with GRC or risk platforms (OneTrust, Vanta, Drata); excellent communication and stakeholder management.
• A commercial mindset: balance risk, deal timelines, and customer expectations.
• Spanish and/or other European languages, in addition to fluent English.

Responsibilities

• InfoSec SME for new business: act as security contact for Sales, Account Management, and Product.
• DDQs and RFPs: own end-to-end responses and assurance requests from customers.
• Customer assurance library: build a central library of approved responses and evidence.
• Customer-facing support: join calls and explain controls to technical and non-technical audiences.
• Expansion and launches: advise on security/regulatory implications for international growth and new products.
• Advisory: respond to internal security queries and anticipate regulatory changes.

Skills

InfoSec SME

GRC

Risk management

Audits

Customer due diligence

Regulatory compliance

Communication

Stakeholder management

Tools

OneTrust

Vanta

Drata

Job description

Ebury Madrid Office is seeking an experienced InfoSec & Compliance Specialist to join our global Information Security function. This hybrid role focuses on keeping ISMS robust and acting as the security face to the business, supporting sales, customers and new initiatives.

You will lead governance, audits, and third-party risk, respond to customer due diligence, and advise on international expansions and product launches, making security a business enabler for growth.