Information Security Manager

About Revolut

People deserve more from their money. More visibility, more control, and more freedom. Since 2015, Revolut has been on a mission to deliver just that. Our powerhouse of products — including spending, saving, investing, exchanging, travelling, and more — help our 75+ million customers get more from their money every day.

As we continue our lightning-fast growth,‌ 2 things are essential to our success: our people and our culture. In recognition of our outstanding employee experience, we've been certified as a Great Place to Work™. So far, we have 13,000+ people working around the world, from our offices and remotely, to help us achieve our mission. And we're looking for more brilliant people. People who love building great products, redefining success, and turning the complexity of a chaotic world into the simplicity of a beautiful solution.

About the role

Our Technology team builds the systems and experiences that keep Revolut moving. From the infrastructure behind our innovative app to the features used by millions of people around the world, they bring sharp thinking, speed, and a focus on meaningful impact to everything they do.

We're looking for an Information Security Manager to collaborate with regulators, management, and the Risk and Compliance team on InfoSec activity. You'll ensure proper documentation and reports are accurate and compliant.

Up to shape what's next in finance? Let's get in touch.

What you'll be doing

• Analysing risk profiles across Technology and Product teams while working across cloud, software, hardware, tooling, data flows, and operations
• Supporting teams in identifying, managing, and reducing operational and technology risk
• Designing, implementing, and testing risk controls
• Performing risk and control assessments and deep dives within Product and Technology teams to come up with actionable insights
• Managing risks to prevent major incidents and breaches, and reducing non-compliance exposure in technology domains
• Establishing and running risk committees and working groups to improve the risk posture of the organisation
• Delivering technology risk insights and reports to the Board and executive committees, and developing data-driven metrics, such as KRIs and BCIs
• Engaging regularly with internal and external stakeholders on the group's IT risk posture
• Driving effective implementation and communication of operational risk management policies and guidelines

What you'll need

• Fluency in English
• Fluency in German (B2+ level)
• A STEM degree, preferably in computer science or IT
• 5+ years of experience in InfoSec, with at least 2+ years in the Swiss market
• Experience within financial services/fintech
• Proficiency in SQL and Python
• Knowledge of industry and regulatory standards related to technology and security (SOX, SOC2, ISO, COBIT, ITIL)
• A solid understanding of IT infrastructure (cloud, software, hardware, tooling, data flows, and operations
• Awareness of how technology impacts security posture, policies, and operational resilience, including change control and BC/DR
• An understanding of the hierarchy among technology, operations, and security policies and standards
• Familiarity with policy compliance and oversight processes
• The ability to adapt messages based on the audience and expectations while interacting with the 1LoD and other stakeholders
• An understanding of ERM frameworks, and the ability to define risk appetite, assess impact, and identify risk likelihood

Nice to have

• Availability to attend the office in Zurich at least once a week to meet with stakeholders across the business
• Technology and change delivery experience at a leading/global consultancy firm
• Experience building and/or scaling up the technology function of a financial services institution or fintech
• Relevant industry-recognised certifications, such as Certified Change Management Professional (CCMP), Information Technology Infrastructure Library (ITIL), and/or Information Technology Service Management (ITSM)
• Familiarity with card products, investments, or FX operations in Switzerland