VP Security

swan.io; Paris; Hybrid; EUR 150,000 - 210,000; Full time

Benefits offered by this job

Meal vouchers

25 days holiday + RTT

Mobility package

Health insurance

Sports partnerships

Well-being support

Hybrid remote policy

Offsite annual gathering

Diversity & inclusion

Job summary

Swan is seeking a VP Security to lead information security strategy, risk management, and regulatory compliance. You will advise the CEO and ExCo, co-chair the security committee, and steer security engineering, ISMS, and incident response.

You’ll collaborate with Product, Platform and Operations to build secure-by-design systems, manage budgets, and communicate risk in business terms to executives and partners.

Qualifications

• 10+ years in information security & security engineering.
• Strong understanding of cloud security, identity and access management, network and application security, and security tooling.
• Hands-on knowledge of ISO 27001, DORA and GDPR.

Responsibilities

• Define and communicate security strategy & budget aligned with Swan’s objectives and risk appetite.
• Lead, coach and develop a team of ~4 across Security Engineering & Governance, Risk & Compliance.
• Drive audit and regulatory readiness and sign off policies.

Skills

Security leadership

Executive communication

Risk management

Cloud security

Regulatory governance

Education

Bachelor’s degree in CS/IS or related

Tools

ISO 27001

DORA

GDPR

Job description

Your mission

As VP Security, you are Swan’s senior security authority and Information Security Management Leader. You advise the CEO and ExCo on cyber risk, represent Swan to regulators (ACPR/ECB), auditors and banking partners, and shape how Product, Platform and Operations build and run securely. You’ll report directly to the CTO.

At Swan, we believe perfect security does not exist. Good leadership here means making explicit, informed, risk-based trade-offs and focusing resources where they have the greatest impact.

Your responsibilities

Leadership & Management

• Define and communicate security strategy & budget aligned with Swan’s business objectives and risk appetite

• Make security understandable and actionable: explain risks, trade-offs and costs in clear business language to the Executive, Risk and Security Committees

• Lead, coach and develop a team of ~4 across Security Engineering & GRC growing their scope, judgment and influence in a high-trust environment with ownership

Steer cyber risk, compliance and trust

• ISMS leader you own ICT risk management, co-chair the Security Committee, run the Management Review, report monthly at Risk Committee and sign off policies

• Drive audit and certification readiness and regulatory compliance, including internal audits

• Represent Swan’s security maturity and risk posture to regulators, auditors, banking partners, enterprise customers and insurers

Lead security operations and resilient technology

• Steer Security projects with your teams and other departments and stay close to the substance: delivery, controls, metrics

• Set expectations for security (threat intelligence, security monitoring, secure-by-design) and privacy, steer business continuity and disaster recovery governance and is senior escalation point for major incidents

• Address emerging risks such as AI security, and support the fraud and anti-abuse teams on our payment flows

Curious about your future team?

The team, 4 people, covers Security Engineering including security monitoring, incident response, governance, risk and audit programmes, ISMS.

You’re a great match if:

You’re a great match if:Security & Technical LeadershipExtensive security experience: 10+ years in information security & security engineeringDeep technical expertise: strong understanding of cloud security, identity and access management, network and application security, and security toolingGovernance, risk & compliance: hands-on knowledge of ISO 27001, DORA and GDPRLeadership & ManagementStrategic thinking: turns business goals and risk appetite into a focused roadmap, balancing security, speed, cost and user experienceStakeholder management: strong executive presence; comfortable with board-level committees, regulators and auditorsClear communicator who explains risk simply, builds a blameless security culture, and collaborates effectively across teamsOperational & Business AcumenRisk-driven: uses risk quantification and data to prioritise work and demonstrate the value of security investmentsBusiness orientation: sees security and compliance as a commercial asset that wins partners and opens marketsNice to haveCertification such as CISSP, CISM, CISA, CRISC or CCSPAI Security posture with ISO 42001, the EU AI Act and broad AI security topicsExperience in a regulated or critical environment: banking, insurance, payments, sensitive SaaS (PSD2, PCI DSS, ACPR)It’s okay if you don’t tick all the boxes, don’t let imposter syndrome prevent you from applying! Swan is committed to providing a caring work environment for all employees, regardless of age, sex, disability, sexual orientation, race, religion, or belief.

About Swan

Perks of being a Swanee:

• Meal Vouchers: We provide a meal voucher card to cover your meals on work days.
• Holidays : 25 days + RTT
• Transport:Monthly mobility package for employees. In accordance with the company agreement for sustainable mobilities, you can now use your mobility package to pay for alternative commuting modes.
• Health insurance (mutuelle): Alan. This is Swan’s health and welfare insurance.
• Sports: Thanks to our partnership with Classpass, you can enjoy advantageous discounts on subscriptions. They offer a wide range of sports activities as well as wellness activities. The offers are valid in several European cities, as well as online.
• Well-being support: access to Moka Care for mental health and wellness.
• Hybrid remote policy: We offer the possibility of working from home for 2 days per week.
• Offsite: Once a year we gather to reconnect, deep-dive into big topics, and relax.
• This isn’t a perk, it should be the rule, but diversity and inclusion are important at Swan. We’re working hard to get better every day.

Our values:

• Simplicity: Leonardo Da Vinci said: “simplicity is the ultimate sophistication.” If something’s convoluted or confusing, we work extra hard to break it down. - Making complex things simple is what we do.
• Long Term: We always play the long game, whether it’s to support our partners in their growth journey, or make tangible commitments to climate action.
• Excellence: We are a team of experts who consistently go all out to create pixel-perfect banking services and exceed our partners’ expectations— whatever it takes.
• Be Human:We believe in the power of kindness and the importance of acting with integrity. But embracing our humanity extends beyond interpersonal interactions, it means caring about greater issues that affect our planet.

You can find out more about our culture.