{"id":1028681,"url":"https://alion.io/job/ebury-senior-internal-audit-manager-it-information-security","title":"Senior Internal Audit Manager - IT & Information Security","company":{"id":51369,"name":"Ebury","domain":"ebury.com","url":"https://alion.io/company/ebury","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":77,"open_postings":15,"ghost_share":0,"stale_share":0.933,"repost_share":0,"time_to_fill_p50_days":24,"computed_at":"2026-11-12T10:38:37Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Madrid, Spain"],"countries":["ES"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":50000,"max_usd":115000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2372},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"Crowdstrike","optional":false},{"name":"DPO","optional":false},{"name":"GDPR","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"PCI DSS","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false}],"status":"live","first_seen_at":"2026-09-18T12:34:59Z","employer_posted_date":"2026-10-19","last_verified_at":"2026-11-13T15:19:49Z","board_verified":true,"closed_at":null,"days_open":56,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":56},"description":"Ebury helps ambitious businesses unlock global growth, and we take the same approach with our people. We encourage innovation and movement, collaboration and problem-solving, and foster an environment where everyone can feel they belong, are valued, supported and empowered to succeed.\nIf you’re a collaborator who wants to help transform how businesses operate globally, get in touch - we’d love to discuss how Ebury can accelerate your career so you can shape the future.\nSenior Internal Audit Manager - IT & Information Security\nEbury Madrid Office - Hybrid: 4 days in the office, 1 day working from home per week\nRole Overview\nThe Senior Audit Manager - IT & Information Security is a technology risk expert responsible for evaluating and enhancing the internal control environment across cloud infrastructure, cyber security controls, third-party ecosystems, and engineering platforms used in the SDLC. This candidate combines deep technical expertise in cloud security and DevSecOps with financial technology regulations (e.g., DORA, FCA PS21/3, PRA Operational Resilience, ISO 27001).\n\nQualification Area\n\nIdeal Candidate Specification\n\nTarget Experience\n\n5+ years in IT/Cyber Audit within cloud-native Fintech platforms, financial institutions, or Big 4 tech practice.\n\nCore Credentials\n\nCISA, CISSP, CISM, or CRISC required; dual ACA/CIA qualification preferred.\n\nTechnical Stack\n\nCloud Infrastructure (AWS), Identity & Access Management, SIEM/SOC (Splunk, CrowdStrike, ReliaQuest), GRC (AuditBoard).\n\nRegulatory Knowledge\n\nDORA, FCA PS21/3, PRA Operational Resilience, ISO 27001, COBIT, NIST framework, and related.\n\nDomain Focus\n\nPayments lifecycle, treasury automation platforms, API security, third-party/BPO risk management.\n\nJob Purpose\nThe Senior Audit Manager - IT & Information Security leads the design, execution, and delivery of the annual IT Audit Plan. Reporting to the Group Head of Internal Audit, the role provides independent assurance to executive stakeholders (CIO, CISO, COO, CRO, DPO) and the Audit Committee regarding platform resilience, cybersecurity maturity, data protection, and adherence to evolving international regulatory standards.\nKey Responsibilities\nTechnology & Cyber Security Assurance\nLead risk-based audits covering cloud infrastructure (AWS), network security, Identity & Access Management (IAM), privileged access, and containerized deployment environments.\nAssess operational effectiveness of Cyber Defense controls, including SOC monitoring, Incident Response, SIEM integration (Splunk), and EDR deployments (CrowdStrike).\nPerform audits of IT General Controls (ITGCs) and automated application controls (ITACs) integrated into CI/CD deployment pipelines.\nThird-Party Risk & Platform Operations\nEvaluate third-party vendor risk management frameworks, conducting hosted assurance reviews for critical SaaS platforms.\nOversee control assurance frameworks for third-party partnerships, ensuring compliance with DORA and FCA PS21/3 operational resilience guidelines.\nRegulatory Alignment & Compliance\nAssess readiness and operational adherence to key regulatory regimes, including DORA, PRA Operational Resilience, SWIFT Customer Security Programme (CSP), and ECCTA/FTP regulations.\nConduct gap analyses and pre-assessment audits against ISO 27001 and PCI DSS standards.\nData management and privacy\nEvaluate data governance frameworks, data lineage, and data quality controls across enterprise analytics and reporting platforms.\nAudit data protection and privacy policies and mechanisms (such as GDPR/CCPA) applied within large-scale data storage and analytics environments.\nStakeholder Management & Governance\nMaintain strong relationships with technical stakeholders, including the CISO, Head of Engineering, CIO, and Chief Data Officer.\nFormulate pragmatic, risk-ranked audit findings and present formal audit reports to Executive Committees and Board Audit Committees.\nTechnical Competencies & Experience Requirements\nProfessional Experience\nMin 5 years experience auditing cloud-native digital architecture (microservices, containerization, API integrations).\nTrack record of building or executing an annual IT risk assessment and audit plan within an engineering-driven or fast-paced Fintech environment.\nProven capability in evaluating end-to-end payment processing controls (authorisation, clearing, settlement, reconciliation).\nCertifications\n Certified Information Systems Auditor (CISA)\n Certified Information Systems Security Professional (CISSP)\n Certified Internal Auditor (CIA) (highly advantageous)\nSkills & Competencies\nAbility to translate complex cybersecurity and technical risks into clear, business-focused insights for non-technical executives.\nPragmatic approach to control framework design, balancing rapid product innovation with regulatory compliance and robust risk management.\nStrong collaborative mindset with experience in mentoring junior auditors and managing external co-source resource partners.\nWhy Ebury?\nCompetitive Starting Salary with an annual discretionary bonus that truly rewards your performance from day one.\nDedicated Mentorship: Learn directly from experienced managers who are invested in your success.\nCutting-Edge Technology: Leverage state-of-the-art tailor made tools and systems that enable you to perform at your best.\nClear, Accelerated Career Progression: Defined pathways to leadership and specialist roles within Ebury.\nDynamic & Supportive Culture: Work in a collaborative environment where teamwork and personal growth are prioritized.\nGenerous Benefits Package: Access competitive benefits tailored to your location, which typically include health care and social benefits.\nCentral Office: A fantastic location with excellent transport links.\nReady to launch your career with a global FinTech? Click the ‘Apply’ Today and discover your potential at Ebury!\nAbout us\nEbury delivers sophisticated, integrated solutions - business accounts, hedging, and financing - on a single platform with a seamless workflow. Our success is built on a simple premise and singular purpose: To help businesses operate and scale globally. \nSince its founding in 2009, Ebury has always been a fast-growing leader in fintech. Today, we bring together 2000+ Eburians across nearly 70 cities and we’re always looking to add to our team. \nAt the heart of our offering is a proprietary platform, purpose-built to help businesses seamlessly streamline and manage global cash flow. We focus on continuous product evolution and innovation to build the infrastructure for borderless growth and help our clients scale at every stage. \nThe opportunities at Ebury are as diverse as our people, ranging from business development to engineering roles across our tech pillars.\nWe believe in inclusion. We stand against discrimination in all forms and are against the intolerance of differences that makes us a modern and successful organisation. At Ebury, you can be whoever you want to be and still feel a sense of belonging no matter your story.\nImportant Security Notice for Job Applicants:\n Ebury only accepts applications via official Ebury channels. We will only contact you from an @ebury.com domain. Always check the emails you receive from us, and note that we will never request payment for any part of the recruitment process. Stay safe and report suspicious activity.\nNotice to Recruitment Agencies and Search Firms:\n Ebury does not accept unsolicited resumes, CVs, or candidate profiles from recruitment agencies or search firms without signed written Ebury recruitment terms in place for a specific role. Any unsolicited applications will be considered the sole property of Ebury. Ebury will not be responsible or liable for any placement fees or costs associated with unagreed candidate submissions or subsequent hires.\nAI Transparency Statement:\n Ebury uses Artificial Intelligence (AI) and automated tools to help streamline certain parts of our recruitment process, however, these tools are strictly for administrative efficiency. All hiring decisions, including application reviews, shortlisting, and final selections are evaluated and conducted by human talent acquisition professionals and hiring managers.","description_format":"text","description_chars":8202,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Spain","iso":"ES","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Security Compliance","Factoring & Trade Finance","Currency Exchange & FX Payments"],"lifecycle":[{"event":"open","at":"2026-09-18T12:49:53Z"}],"visa":[],"liveness":{"score":14,"band":"cold","label":"Long shot","p_open":1,"p_active":0.515,"p_room":0.28,"age_days":54,"expected_fill_days":24,"reasons":["conf:3","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-11-12T10:38:37Z"},"pay":null,"html_url":"https://alion.io/job/ebury-senior-internal-audit-manager-it-information-security","json_url":"https://alion.io/job/ebury-senior-internal-audit-manager-it-information-security.json","meta":{"generated_at":"2026-11-13T18:47:01Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":37546,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":51369},"rest":"https://alion.io/mcp/rest/get_company?id=51369"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Febury-senior-internal-audit-manager-it-information-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Febury-senior-internal-audit-manager-it-information-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Febury-senior-internal-audit-manager-it-information-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ebury-senior-internal-audit-manager-it-information-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Febury-senior-internal-audit-manager-it-information-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":1028681}},{"tool":"search_jobs","arguments":{"company":"ebury.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":1028681},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}