Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Tailor your resume to this Security GRC Manager role.
Rezi rewrites your resume against Teya's job description. Free.
Tailor your resume to this Security GRC Manager role.
Rezi rewrites your resume against Teya's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Security GRC Manager posting at Teya — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Security GRC Manager posting at Teya — free, in seconds.
About the Role
Teya is a regulated payments fintech serving small businesses across Europe. Security, audit, and regulatory trust are critical for maintaining licenses, card-scheme access, and market access. As Security GRC Manager, you will lead a team to translate complex regulations into clear, actionable processes, driving GRC transformation and ensuring compliance.
Responsibilities
- Lead and develop the Security GRC team, managing sprints and balancing roadmap work with unplanned demand.
- Represent Security GRC to auditors, assessors, regulators, the CISO, and senior stakeholders.
- Lead UK regulatory coverage, including operational resilience and FCA expectations, partnering with the EU GRC Lead for DORA.
- Own ISMS policies and develop a unified control set across all frameworks to streamline evidence requests.
- Own the security risk methodology, scenario library, and risk register, collaborating with 2nd-line Risk and relevant programs.
- Run third-party security assessments with Procurement, Privacy, and Legal, managing exceptions and risk acceptance.
- Plan the annual audit program and lead PCI DSS and SWIFT CSP assessments.
- Own the consolidated findings register to ensure issues are resolved effectively.
- Implement Vanta as the source of truth for evidence and lead automated control assurance, including AI-assisted reviews.
- Oversee the Significant Change procedure for PCI-scoped changes and manage access controls.
- Report GRC metrics, risks, and audit status to Security leadership.
Requirements
- 7+ years in information security, with significant GRC leadership in regulated financial services; UK banking or payments experience strongly preferred.
- Hands-on ownership of a PCI DSS or equivalent program, including managing the QSA relationship and Report on Compliance.
- Experience with UK regulation, including operational resilience, and ideally regulatory authorization or supervisory review.
- Proven track record of designing and managing a security risk register, governance forum, and third-party security risk program.
- Experience in automating assurance at scale, with built-in human accountability and auditability.
- Sufficient technical depth in infrastructure, cloud, identity, and network controls to engage credibly with engineers.
- Ability to communicate clearly and concisely with engineers, executives, auditors, and regulators.
- A collaborative approach, focusing on advising, enabling, and persuading.
- Experience with SWIFT CSP, PCI PIN, PCI MPoC, ISO 27001, DORA, or Vanta is a plus.
Skills
- PCI DSS
- SWIFT CSP
- ISO 27001
- PCI PIN
- PCI MPoC
- DORA
- Vanta
- Information Security
- GRC Leadership
- Regulatory Compliance
- Risk Management
- Third-Party Risk Assessment
- Audit Management
- Operational Resilience
- FCA Regulations
- Cloud Security
- Identity and Access Management
- Network Security
Location
- Central London
Work Type
- Flexible working hours
- Onsite
Experience Level
- 7+ years in information security
- GRC leadership
Benefits
- Flexible working hours
- Physical and mental health support through WellHub (gym access, therapy, meditation, digital apps)
- Extended and improved maternity and paternity leave
- Cycle-to-Work Scheme
- Health and Life Insurance
- Pension Scheme
- 25 days of Annual Leave plus Bank Holidays
- Office snacks
About the Company
- Teya is building a financial platform for local businesses across Europe, offering simple tools, thoughtful design, and real human support.
- The company aims to change financial services for local businesses by providing better tools, support, and simplicity.
- Teya operates in the regulated payments fintech sector, serving small businesses across Europe.
Equal Opportunity
- Teya is proud to be an equal opportunity employer.
- The company is committed to creating an inclusive environment where everyone can thrive, regardless of race, ethnicity, gender identity or expression, sexual orientation, age, disability, religion, or background.
- Teya believes a diverse team leads to better ideas, stronger outcomes, and a more supportive workplace.
- The company is committed to ensuring fair and accessible experiences for all candidates and offers reasonable adjustments throughout the recruitment process.