Information Security Manager

TL;DR

Information Security Manager (InfoSec/Risk): Collaborating with regulators, management, and Risk & Compliance to run information security activity, ensure accurate documentation and reporting, and shape technology risk controls. Focus on analysing technology and product risk profiles across cloud, software, hardware, tooling, data flows, and operations, and delivering board-level technology risk insights with data-driven metrics.

Location: Remote (Switzerland)

Company

Revolut builds a global financial super app with products for spending, saving, investing, exchanging, and travel.

What you will do

• Analyse risk profiles across Technology and Product teams across cloud, software, hardware, tooling, data flows, and operations.
• Support teams in identifying, managing, and reducing operational and technology risk.
• Design, implement, and test risk controls; perform risk and control assessments and deep dives.
• Manage risks to prevent major incidents and breaches and reduce non-compliance exposure.
• Establish and run risk committees and working groups to improve the organisation’s risk posture.
• Deliver technology risk insights and reports to the Board and executive committees, including KRIs and BCIs.

Requirements

• Fluency in English.
• Fluency in German (B2+ level).
• 5+ years of experience in InfoSec, including at least 2+ years in the Swiss market.
• Experience in financial services/fintech.
• Proficiency in SQL and Python.
• Knowledge of technology and security regulatory standards (SOX, SOC2, ISO, COBIT, ITIL) and IT infrastructure, including change control and BC/DR.

Nice to have

• Availability to attend the office in Zurich at least once a week.
• Technology and change delivery experience at a leading/global consultancy firm.
• Certifications such as ITIL/ITSM and other industry-recognised credentials.
• Familiarity with card products, investments, or FX operations in Switzerland.

Culture & Benefits

• Remote work with periodic in-office stakeholder meetings in Zurich (at least once a week, if available).
• Collaboration with regulators, management, and Risk & Compliance to improve risk posture and compliance.
• Data-driven reporting to executive committees and the Board using KRIs and BCIs.
• Work in a fast-growing, multicultural environment focused on meaningful impact.