Security GRC Manager — Regulated FinTech Risk Lead

Teya; Greater London; Vor Ort; GBP 90.000 - 130.000; Vollzeit

Benefits dieser Stelle

Flexible working hours

WellHub fitness & wellbeing benefits

Enhanced parental leave

Cycle-to-Work Scheme

Health and Life Insurance

Pension Scheme

25 days annual leave

Office snacks

Zusammenfassung

Teya, a regulated payments fintech serving local businesses across Europe, is hiring a Security GRC Manager in London. You will lead the Security GRC team, align policies with PCI DSS, SWIFT CSP, and ISO 27001, and drive regulatory compliance with UK authorities.

The role focuses on transforming governance into scalable, automated processes. Reporting to the CISO, you’ll partner with security engineering and procurement to improve evidence collection and audit readiness while shaping risk

Qualifikationen

• 7+ years in information security with GRC leadership in regulated financial services.
• Hands-on ownership of PCI DSS or equivalent programme, including QSA relationships.
• Experience with UK regulation, operational resilience and regulatory reviews.
• Track record designing and running security risk governance and third-party risk programmes.
• Experience automating assurance at scale with auditability.

Aufgaben

• Lead the Security GRC team with sprint cadence and manage roadmap vs unplanned demand.
• Represent GRC to auditors, regulators and senior stakeholders.
• Own UK regulatory coverage including resilience and FCA expectations.
• Develop a unified ISMS control set across frameworks.
• Maintain the risk methodology, scenario library and risk register.
• Coordinate third-party assessments with Procurement, Privacy and Legal.
• Plan audits and lead PCI DSS and SWIFT CSP assessments.
• Maintain consolidated findings and automate evidence review.
• Oversee access controls and change procedures.
• Report metrics and audit status to Security leadership.

Kenntnisse

GRC leadership

Regulatory knowledge

Information security

Communication

Vendor management

Auditing

Regulatory alignment

Tools

QSA relationship

ISO 27001

SWIFT CSP

Vanta

Jobbeschreibung

Teya, a regulated payments fintech serving local businesses across Europe, is hiring a Security GRC Manager in London. You will lead the Security GRC team, align policies with PCI DSS, SWIFT CSP, and ISO 27001, and drive regulatory compliance with UK authorities.

The role focuses on transforming governance into scalable, automated processes. Reporting to the CISO, you’ll partner with security engineering and procurement to improve evidence collection and audit readiness while shaping risk