Information Security GRC Manager (Fintech)

TL;DR

Information Security GRC Manager (Fintech): Supporting the Senior Manager and Chief Information Security Officer in managing and reporting information security risks across Technology Services and the wider business with an accent on ensuring appropriate controls, policies, and procedures are in place. Focus on supporting internal and external audits, as well as due diligence activities with partners and suppliers.

Location: Manchester or London, minimum of 50% of your working time per month spent in the office.

Company

hirify.global is one of the UK’s fastest-growing investment platform businesses, providing award-winning solutions for everyone, from professional financial advisers to first-time investors.

What you will do

• Develop and maintain information security policies aligned to recognised frameworks (e.g. ISO27001/2).
• Manage and report on policy exceptions.
• Produce management reporting on information security and change programmes.
• Partner with business and technology teams to track remediation of risks and issues.
• Support the assessment of third-party security posture.
• Support audit activity and supplier due diligence processes.

Requirements

• Strong knowledge of information security risk management tools and techniques.
• Experience with security frameworks and standards such as ISO27001, NIST or similar.
• Understanding of the threat landscape and awareness of security technologies.
• Knowledge of IT General Controls frameworks and awareness of operational risk and RCSA processes.
• Ideally 5+ years’ experience in an information security role within financial services.
• Strong communication skills and ability to manage multiple priorities in a fast-paced environment.

Nice to have

• CISM certification (achieved or in progress) preferred.

Culture & Benefits

• 27 days holiday, increasing with service + buy/sell scheme + bank holidays.
• 8% Pension with matched contributions and discretionary bonus scheme.
• Health Cash Plan and discounted private healthcare.
• Regular social events and learning and development opportunities.
• Casual dress code and friendly, supportive team environment.