ZEN.COM is a smart financial app designed for your everyday life – at home and on the go. We make payments, online shopping, and personal finance management fast, secure, and effortless. With ZEN.COM, you can enjoy cashback on purchases, full control over your spending, and peace of mind thanks to purchase protection. A built-in multi-currency account lets you spend abroad or shop internationally with great exchange rates and no hidden fees.
We are looking for a proactive and experienced Information Security Manager to join our growing fintech organisation in the United Kingdom. In this role, you will drive the development and execution of our information security framework, ensuring robust protection of customer data, compliance with UK and EU regulations, and alignment with fast-paced product innovation.
You will work closely with Technology, Risk, Compliance, and Product teams to embed security into our agile and cloud-native environment.
Requirements
- 5+ years of experience in information security management, ideally within financial services, banking, or payments
- Experience in InfoSec and Cyber Security
- Experience setting up policies and processes in InfoSec area
- Understanding of agile development processes and devops
- Strong analytical and problem solving skills
- An analytical mindset with great stakeholder management and communication skills
- The ability to work independently and take initiative when needed elevant information security certifications
- Familiarity with PCI-DSS, ISO27001, SOC 2/3 or other global standards
- Familiarity with regulatory requirements (DORA, PCI-DSS, PSD2, GDPR)
Responsibilities
- Policy and procedure localizing, writing and implementing as efficient processes
- Periodic review and improvement of existing processes and policies
- Conducting security vendor assessments
- Monitor the effectiveness of security controls and identify areas for improvement
- Performing security risk and control assessments for new products or initiatives
- Working with third party InfoSec auditors (penetration testing, PCI compliance etc)
- Conduct regular risk assessments and vulnerability assessments to identify security gaps and develop appropriate mitigation plans
- Conducting regulatory gap analysis for regulations and local laws
- Answering regulatory requests related to information security
- Managing information security incidents
- Oversee information security risks associated with outsourced services and intra-group arrangements
- Testing the annual information security control plan in collaboration with the wider Information Security and Technology teams
What We Offer
- Real influence on shaping the ZEN.COM.
- Work in an environment where innovation and effectiveness truly matter.
- Competitive salary and flexible working conditions.
- Private medical healthcare.
- Internal and external training opportunities.
#J-18808-Ljbffr