Security GRC Manager

The role

You will lead a team of three to manage policy, risk, and regulatory alignment. You will turn various frameworks and regulations into automated ways of working for engineering teams.

What you will do

• Lead and develop the Security GRC team using a two-week sprint cadence
• Represent Security GRC to auditors, assessors, regulators, the CISO and senior stakeholders
• Lead UK regulatory coverage including operational resilience and FCA expectations
• Own the ISMS policies and build one mapped control set across all frameworks
• Own the security risk methodology, scenario library and risk register
• Run third-party security assessments with Procurement, Privacy and Legal
• Plan the annual audit programme and lead PCI DSS and SWIFT CSP assessments
• Own the consolidated findings register
• Make Vanta the source of truth for evidence and lead governed automation of control assurance
• Own the Significant Change procedure for PCI-scoped changes and oversee access and joiner-mover-leaver controls

Required qualifications

• 7+ years in information security
• Substantial GRC leadership in regulated financial services
• Hands-on ownership of a PCI DSS or equivalent programme, including the QSA relationship and Report on Compliance end to end
• Experience of UK regulation, including operational resilience
• A track record of designing and running a security risk register, governance forum and third-party security risk programme
• Experience automating assurance at scale
• Technical depth in infrastructure, cloud, identity and network controls
• Clear, plain-language communication with engineers, executives, auditors and regulators
• A partner mindset

Nice to have

• UK banking or payments
• Regulatory authorisation or supervisory review
• Experience with SWIFT CSP, PCI PIN, PCI MPoC, ISO 27001, DORA or Vanta

Benefits

• Flexible working hours
• Physical and mental health support through WellHub including free access to over 1,500 gyms in the UK, 1-1 therapy, meditation sessions, and digital fitness and nutrition apps
• Extended and improved maternity and paternity leave choices
• Cycle-to-Work Scheme
• Health and Life Insurance
• Pension Scheme
• 25 days of Annual Leave (plus Bank Holidays)
• Office snacks every day

About the company

Teya is a regulated payments fintech serving small businesses across Europe. They build a financial platform for local businesses using simple tools, thoughtful design and real human support.