Pro members applied to this job 36 hours before you saw itGet Pro ›

teya - Security GRC Manager

London2d ago

In Office Senior EMEA Banking Payments Security Management Specialist Team Lead Reporting Governance Swift Procurement

Requirements

• 7+ years in information security, with substantial GRC leadership in regulated financial services; UK banking or payments strongly preferred • Hands-on ownership of a PCI DSS or equivalent programme, including the QSA relationship and Report on Compliance end to end • Experience of UK regulation, including operational resilience, and ideally a regulatory authorisation or supervisory review • A track record of designing and running a security risk register, governance forum and third-party security risk programme • Experience automating assurance at scale, with human accountability and auditability built in • Enough technical depth in infrastructure, cloud, identity and network controls to challenge evidence and work credibly with engineers • Clear, plain-language communication with engineers, executives, auditors and regulators • A partner mindset: you advise, enable and persuade rather than block • Experience with SWIFT CSP, PCI PIN, PCI MPoC, ISO 27001, DORA or Vanta is a plus

Responsibilities

• Lead and develop the Security GRC team, running a two-week sprint cadence and balancing roadmap work against heavy unplanned demand • Represent Security GRC to auditors, assessors, regulators, the CISO and senior stakeholders • Lead UK regulatory coverage, including operational resilience and FCA expectations, partnering with the team’s GRC Lead for EU regulation and DORA • Own the ISMS policies and build one mapped control set across all frameworks, so teams get one evidence request instead of several • Own the security risk methodology, scenario library and risk register, working with 2nd-line Risk and the OpRes and DORA programmes • Run third-party security assessments with Procurement, Privacy and Legal, including the exceptions and risk acceptance path • Plan the annual audit programme and lead PCI DSS (with the QSA) and SWIFT CSP assessments • Own the consolidated findings register so issues are closed, not re-raised audit after audit • Make Vanta the source of truth for evidence and lead governed automation of control assurance, including AI-assisted evidence review with named human owners • Own the Significant Change procedure for PCI-scoped changes and oversee access and joiner-mover-leaver controls • Report GRC metrics, risks and audit status to Security leadership

Benefits

• We trust you, so we offer flexible working hours, as long as it suits both you and your team. • Physical and mental health support through our partnership with WellHub, giving free access to over 1,500 gyms in the UK, 1-1 therapy, meditation sessions, and digital fitness and nutrition apps. • Our company offers extended and improved maternity and paternity leave choices, giving employees more flexibility and support. • Cycle-to-Work Scheme. • Health and Life Insurance. • Pension Scheme. • 25 days of Annual Leave (plus Bank Holidays). • Office snacks every day. • Friendly, comfortable, and informal office environment in Central London.