VP Security (Fintech)

Location: Paris, France; hybrid, with the possibility of working from home 2 days per week

Salary: €90,000–€140,000 per year

Company

hirify.global is a European embedded banking specialist that enables software companies to integrate branded accounts, cards, and payments into their products. hirify.global processes more than €2.5 billion in monthly transactions for over 150 companies and operates as a licensed financial institution regulated by the French banking authority.

What you will do

• Define and communicate the security strategy and budget in line with business objectives and risk appetite.
• Lead, coach, and develop a team of approximately four people across Security Engineering and GRC.
• Own the ICT risk management framework, including the risk register, assessments, treatment plans, exceptions, and escalation.
• Drive ISO 27001 audit and certification readiness, internal audits, and compliance with DORA, PSD2, GDPR, and the EU AI Act.
• Represent hirify.global’s security maturity and risk posture to executives, committees, regulators, auditors, banking partners, enterprise customers, and insurers.
• Set expectations for threat intelligence, monitoring, vulnerability management, penetration and threat-led testing, secure-by-design practices, postmortems, and AI security.

Requirements

• 10+ years of experience in information security and security engineering.
• Strong understanding of cloud security, identity and access management, network security, application security, and security tooling.
• Hands-on knowledge of ISO 27001, DORA, and GDPR.
• Ability to translate business goals and risk appetite into a focused roadmap while balancing security, speed, cost, and user experience.
• Strong executive presence and comfort working with board-level committees, regulators, and auditors.
• Clear communication skills, including the ability to explain risk simply and build a blameless security culture.
• Ability to use risk quantification and data to prioritise work and demonstrate the value of security investments.
• Business orientation, viewing security and compliance as commercial assets that win partners and open markets.

Nice to have

• Certification such as CISSP, CISM, CISA, CRISC, or CCSP.
• AI security experience, including ISO 42001, the EU AI Act, and broad AI security topics.
• Experience in a regulated or critical environment such as banking, insurance, payments, or sensitive SaaS, including PSD2, PCI DSS, or ACPR.

Culture & Benefits

• Hybrid remote policy with 2 work-from-home days per week.
• 25 vacation days plus RTT and a monthly mobility package.
• Meal vouchers, Alan health insurance, ClassPass discounts, and Moka Care mental health and wellness support.
• Annual offsite focused on reconnecting, deep-diving into major topics, and relaxing.
• Values include simplicity, long-term thinking, excellence, kindness, integrity, and diversity and inclusion.

Hiring process

• 45-minute call with Talent Acquisition, followed by a 60-minute interview with the CTO.
• Take-home case study presented to the CTO and CRO, followed by interviews with the Chief People Officer and peer interviewers.
• Final 60-minute interview with the CEO.