Security GRC Manager (Fintech)

Location: London, United Kingdom; office environment in Central London

Company

hirify.global is a regulated payments fintech building a financial platform with simple tools and support for local businesses across Europe.

What you will do

• Lead and develop a three-person Security GRC team using a two-week sprint cadence while balancing roadmap work and unplanned demand.
• Represent Security GRC to auditors, assessors, regulators, the CISO and senior stakeholders.
• Lead UK regulatory coverage, including operational resilience and FCA expectations, while partnering on EU regulation and DORA.
• Own ISMS policies, a mapped control set, the security risk methodology, scenario library and risk register.
• Run third-party security assessments with Procurement, Privacy and Legal, including exceptions and risk acceptance.
• Plan audits and lead PCI DSS and SWIFT CSP assessments, consolidate findings, and govern evidence automation in Vanta, including AI-assisted evidence review with named human owners.

Requirements

• 7+ years in information security with substantial GRC leadership in regulated financial services; UK banking or payments experience is strongly preferred.
• Hands-on ownership of a PCI DSS or equivalent programme, including the QSA relationship and the Report on Compliance end to end.
• Experience with UK regulation, including operational resilience; regulatory authorisation or supervisory review experience is required as applicable to the role.
• Experience designing and running a security risk register, governance forum and third-party security risk programme.
• Experience automating assurance at scale with human accountability and auditability.
• Technical depth in infrastructure, cloud, identity and network controls sufficient to challenge evidence and work credibly with engineers.
• Clear, plain-language communication with engineers, executives, auditors and regulators.
• A partner mindset focused on advising, enabling and persuading rather than blocking.

Nice to have

• Experience with SWIFT CSP, PCI PIN, PCI MPoC, ISO 27001, DORA or Vanta.

Culture & Benefits

• Flexible working hours agreed with the team.
• Physical and mental health support through WellHub, including UK gym access, therapy, meditation and digital fitness and nutrition apps.
• Extended and improved maternity and paternity leave options.
• Health and life insurance, pension scheme and Cycle-to-Work Scheme.
• 25 days of annual leave plus bank holidays, daily office snacks and a friendly informal Central London office.