Information Security Manager

Requirements

• 5+ years of experience in information security management, ideally within financial services, banking, or payments
• Expertise in InfoSec and IT operations with a focus on security risks and mitigation
• Technical security knowledge and familiarity with regulatory requirements (DORA, PCI-DSS, PSD2, GDPR)
• The ability to deliver localised IT and InfoSec policies to meet French and European regulations
• Expertise in industry standards, like ISO 27001:2022
• An analytical mindset with great stakeholder management and communication skills
• Excellent organisational and time management skills, with the ability to multitask
• A high level of motivation with a positive, self-starter attitude
• Team collaboration skills
• The ability to work independently and take initiative when needed
• Flexibility and a willingness to tackle a variety of duties and learn new skills

Nice to have

• Experience within fast-paced environments
• Relevant information security certifications (CISSP, CISM, CRISC, CISA)
• Knowledge of building SQL queries for business intelligence/management

What you'll be doing

• Localising and defining information security policies and procedures
• Conducting annual information security risk assessment at entity and application level
• Testing the annual information security control plan in collaboration with the wider Information Security and Technology teams
• Conducting security vendor assessments
• Monitoring information security key risk indicators, ensuring escalation if a breach is identified
• Performing security risk and control assessments for new products or initiatives
• Conducting regulatory gap analysis for regulations and local laws
• Answering regulatory requests related to information security
• Designing data-driven dashboards on information security services and risks to report to internal committees
• Managing information security incidents