Information Security Manager

Colibrix One
Laza, Spain
10 days ago
Apply on www.buscojobs.com.es
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Working hours
Regular working hours

Tech stack

Artificial Intelligence Amazon Web Services Cloud Computing Security Cyber Security Continuous Integration Disaster Recovery Identity and Access Management Payment Service Provider PCI Data Security Standards Role-Based Access Control Phishing Kubernetes

Job description

Join Colibrix One - Innovating the Future of PaymentsAtColibrix One, we’re building advanced, AI-powered payment technologies that support Payment Service Providers (PSPs), Electronic Money Institutions (EMIs), and neobanks across the EU and the UK. As a fully licensed EMI (FCA reference number **) and a Principal Member of Mastercard, we offer real-world financial solutions that include:Global card processingDigital wallet infrastructureCross-border merchant accountsAlternative payment methods (APMs)Corporate accounts for legal entitiesWe’re a fast-growing team with a passion for innovation, security, and scalability. Our culture values curiosity, collaboration, and impact - and we’re looking for talented professionals who are ready to shape the future of fintech.At Colibrix One, your work directly powers the digital economy. If you’re eager to solve meaningful challenges and build with purpose, we’d love to hear from you.We’re looking for an experiencedInformation Security Managerto lead security policy development, manage risks and incidents, and ensure compliance with standards like PCI DSS, ISO, and GDPR. You’ll drive security awareness, oversee access and asset management, and support cloud and infrastructure security across the business.ResponsibilitiesDevelop and enforce security policies: company-wide rules, standards, and proceduresDefine acceptable use rules: corporate devices, data, communication tools.Implement asset management practices: classification, inventory, ownership.Oversee access management: RBAC, periodic reviews, approval workflows.Safeguard data confidentiality: enforce handling rules, prevent leakage, monitor misuse.Drive governance and awareness: security culture, training, phishing campaigns.Prevent insider risks: education, monitoring, process enforcement.Manage security incidents: coordination, escalation, root cause, executive reporting.Assess and manage business risks: finance, HR, sales, operations.Strengthen supply chain security: vendor risk assessments, third-party dependencies, assurance.Maintain and test continuity plans: BCP, DRP, resilience validation.Serve as an interface for PCI DSS, DORA, SWIFT, ISO, GDPR compliance needs.RequirementsExperience in managing asset and access management systems.Experience in incident management and security governance.Knowledge of business domains, ability to identify security risks and mitigate them.Solid understanding of infrastructure and cloud security (AWS, Kubernetes, CI/CD pipelines).Practical experience in Information Security Awareness: education, simulations.Background in risk management, business continuity, and disaster recovery planning.Experience working with vendors, regulators, and external partners.Proficiency in Security standards: PCI DSS, DORA, SWIFT, ISO, GDPRNice to haveExperience in fintech, banking, or other regulated industries.Participation in certification projects (PCI DSS, ISO, SOC 2).Certifications: CISSP, CISM, CISA, AWS Security Specialty.Experience with FinOps and security cost optimization.Background in building and scaling Security Awareness programs.What We Offer:Opportunity to shape the future of fintech solutions within a growing companyCollaborative, horizontal team structure that values your expertise and ideasContinuous learning and development opportunities to enhance your skills and career growthCompetitive salary and benefits packageFlexible work arrangements to support work-life balance Employment will be offered through one of the group’s legal entities - Mellifera Kartiera Ltd, Colibrix Ltd, or Mellifera Operations Ltd - depending on the role, location, and applicable legal framework.Please note that Colibrix One is a brand representing a group of legal entities. The employment contract will be signed with the relevant company within the group (Mellifera Kartiera Ltd, Colibrix Ltd, or Mellifera Operations Ltd) depending on the nature of the position and jurisdictionThis position is offered within the Colibrix one. Employment will be under the appropriate legal entity based on the role and location.

Requirements

Experience in managing asset and access management systems. Experience in incident management and security governance. Knowledge of business domains, ability to identify security risks and mitigate them. Solid understanding of infrastructure and cloud security (AWS, Kubernetes, CI/CD pipelines). Practical experience in Information Security Awareness: education, simulations. Background in risk management, business continuity, and disaster recovery planning. Experience working with vendors, regulators, and external partners. Proficiency in Security standards: PCI DSS, DORA, SWIFT, ISO, GDPR Nice to have Experience in fintech, banking, or other regulated industries. Participation in certification projects (PCI DSS, ISO, SOC 2). Certifications: CISSP, CISM, CISA, AWS Security Specialty. Experience with FinOps and security cost optimization. Background in building and scaling Security Awareness programs.

Benefits & conditions

Opportunity to shape the future of fintech solutions within a growing company Collaborative, horizontal team structure that values your expertise and ideas Continuous learning and development opportunities to enhance your skills and career growth Competitive salary and benefits package Flexible work arrangements to support work-life balance

  • Employment will be offered through one of the group’s legal entities - Mellifera Kartiera Ltd, Colibrix Ltd, or Mellifera Operations Ltd - depending on the role, location, and applicable legal framework. Please note that Colibrix One is a brand representing a group of legal entities. The employment contract will be signed with the relevant company within the group (Mellifera Kartiera Ltd, Colibrix Ltd, or Mellifera Operations Ltd) depending on the nature of the position and jurisdiction This position is offered within the Colibrix one. Employment will be under the appropriate legal entity based on the role and location.

About the company

Laza, Orense, EspaĂąa

Join Colibrix One - Innovating the Future of Payments At Colibrix One* , we’re building advanced, AI-powered payment technologies that support Payment Service Providers (PSPs), Electronic Money Institutions (EMIs), and neobanks across the EU and the UK. As a fully licensed EMI (FCA reference number **) and a Principal Member of Mastercard, we offer real-world financial solutions that include: Global card processing Digital wallet infrastructure Cross-border merchant accounts Alternative payment methods (APMs) Corporate accounts for legal entities We’re a fast-growing team with a passion for innovation, security, and scalability. Our culture values curiosity, collaboration, and impact - and we’re looking for talented professionals who are ready to shape the future of fintech. At Colibrix One, your work directly powers the digital economy. If you’re eager to solve meaningful challenges and build with purpose, we’d love to hear from you.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.buscojobs.com.es
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

1:45 min

Transitioning from software development to security roles

Stefania Chaplin ¡ World Congress 2022

1:29 min

Evaluating phishing emails that leverage artificial time constraints

Mauro Verderosa ¡ LIVE

2:28 min

Understanding Kubernetes architecture and core cluster components

Marc Nimmerrichter ¡ World Congress 2022

4:11 min

Introduction to cloud-native application developer security

Micah Silverman ¡ World Congress 2022

5:21 min

Protecting infrastructure with the shared responsibility model

Mustafa Toroman ¡ World Congress 2023

2:39 min

Exposing stored XSS and phishing attacks via markdown

Ramona Schwering Ramona Schwering ¡ World Congress 2026 Europe

Videos

See all

Related articles

See all