Security Operations & GRC Manager

About the role

AccessFintech is looking for a senior information security professional to lead its internal security posture, governance, risk and compliance programme, and client‑facing security activities. Reporting to the CTO, you will work across engineering, product, client operations and solutions teams in multiple jurisdictions.

Key responsibilities

• Own and continuously improve the company’s security posture across infrastructure, applications, cloud environments and endpoints.
• Lead the operation and evolution of security tooling such as SIEM, EDR, vulnerability management, intrusion detection and IAM.
• Manage the vulnerability management programme, including assessments, remediation tracking and risk reporting.
• Direct security incident response from identification through post‑incident review.
• Maintain and develop security policies, standards and procedures across all jurisdictions.
• Embed security into the SDLC by partnering with engineering and DevOps.
• Design and deliver security awareness training globally.
• Serve as the primary contact for client security enquiries, questionnaires (e.g., Shared Assessments SIG, CSA CAIQ) and audits.
• Build and maintain a central answer library to ensure consistent, accurate questionnaire responses.
• Support client onboarding from a security and compliance perspective.

Required profile

• Senior information security professional with experience in security operations, GRC and client‑facing security.
• Proven ability to work with senior leadership and cross‑functional technical teams.
• Experience in a technology or financial services environment handling sensitive data.

Required skills

• SIEM
• EDR
• Vulnerability management
• Intrusion detection
• Identity and Access Management (IAM)
• Security incident response
• Security tooling implementation
• Cloud security
• Endpoint security
• Security governance, risk and compliance frameworks
• Security questionnaire handling (Shared Assessments SIG, CSA CAIQ)