# Information Security Manager at Ebury

Ebury is hiring an Information Security Manager in Madrid, Spain. Level rates it Little AI ●○○○; you can [apply on Ebury](https://jobsbylevel.com/go/542fe1c9-bfc9-4f82-8fa5-d58a3e74edc9?utm_medium=ai-agent).

AI Level 1, AI centrality 38 out of 100. Madrid.

## Details

- Company: [Ebury](https://jobsbylevel.com/companies/ebury)
- AI level: AI Level 1 (score 38 out of 100)
- Location: Madrid
- Posted: November 11, 2026
- Apply: https://jobsbylevel.com/go/542fe1c9-bfc9-4f82-8fa5-d58a3e74edc9?utm_medium=ai-agent
- Free CV review for this job: https://jobsbylevel.com/cv-review?job=information-security-manager-at-ebury-70cfd6

## Description

Ebury helps ambitious businesses unlock global growth, and we take the same approach with our people. We encourage innovation and movement, collaboration and problem-solving, and foster an environment where everyone can feel they belong, are valued, supported and empowered to succeed. If you’re a collaborator who wants to help transform how businesses operate globally, get in touch - we’d love to discuss how Ebury can accelerate your career so you can shape the future. InfoSec Manager Security Ebury Madrid Office - Hybrid: 4 days in the office, 1 day working from home per week Ebury is looking for an experienced, hands-on InfoSec & Compliance Specialist to join our global Information Security function, reporting directly to the CISO. This role has two sides: keeping our ISMS and compliance obligations robust and auditready, and acting as the face of Information Security to the business, supporting sales, customers, and new business initiatives. You will maintain our security frameworks and own day-to-day governance, audits, and third-party risk. You will also act as the InfoSec subject-matter expert for commercial teams, responding to customer due diligence questionnaires and RFPs, supporting security conversations with prospects and clients, and advising on international expansions and new product launches. Your goal is to make security a business enabler: helping Ebury win and retain customers, enter new markets, and launch products with confidence. What you’ll do Business Enablement & Customer Assurance: InfoSec SME for new business : Act as the security point of contact for Sales, Account Management, and Product, supporting prospects and customers through security reviews, calls, and onboarding. DDQs and RFPs : Own the end-to-end response to security due diligence questionnaires, RFP/RFI security sections, and assurance requests from both existing and new customers, ensuring accurate, consistent, and timely answers. Customer assurance library : Build and maintain a central library of approved responses, certifications, and evidence (e.g., ISO 27001 certificate, SOC reports, PCI DSS attestation, pen test summaries), and automate response workflows where possible. Customer-facing support : Join customer and prospect calls as the security expert, explaining Ebury's controls and posture clearly to technical and nontechnical audiences, and escalating contractual or risk concerns to the CISO. Expansion and launches : Advise on the security and regulatory implications of international expansion, new products, and strategic partnerships, providing early guidance so security supports rather than slows delivery. Commercial insight : Track recurring customer questions and requirements, and feed trends back to the CISO and product teams to inform the security Governance & Compliance (BAU): I SMS and policy management : Lead the annual review and update of security policies, standards, and controls, ensuring alignment with ISO 27001, PCI DSS, SOC 2, NIST, GDPR, DORA, and local regulations. Internal audits : Plan and run the internal audit programme for the ISMS and key controls, report findings, and track remediation to closure. External audits and certifications : Act as the point of contact for external auditors and assessors; coordinate evidence gathering, manage audit logistics, and track remediation of findings. Regulator engagement : Support responses to regulatory enquiries and assessments in fintech and financial services. Third-party risk management (TPRM) : Evaluate vendor risk through due diligence questionnaires and security reviews for new and existing suppliers. Security exceptions : Manage the exception lifecycle: review requests, assess and quantify risk and impact, ensure formal sign-off, and drive periodic re-evaluation. Advisory : Address internal security queries on compliance standards and best practices, and stay ahead of evolving regulation to proactively adapt Ebury's frameworks. Strategic Project Support:

The description is cut here. Read the full offer: https://jobsbylevel.com/jobs/information-security-manager-at-ebury-70cfd6

Source: https://jobsbylevel.com/jobs/information-security-manager-at-ebury-70cfd6

## Cite this page

Level. https://jobsbylevel.com/jobs/information-security-manager-at-ebury-70cfd6.

Get job alerts: https://jobsbylevel.com/newsletter