VP Security

✨  Your mission

As VP Security, you are Swan’s senior security authority and Information Security Management Leader. You advise the CEO and ExCo on cyber risk, represent Swan to regulators (ACPR/ECB), auditors and banking partners, and shape how Product, Platform and Operations build and run securely. You’ll report directly to the CTO.

At Swan, we believe perfect security does not exist. Good leadership here means making explicit, informed, risk-based trade-offs and focusing resources where they have the greatest impact.

✨  Your responsibilities

Leadership & Management

• Define and communicate security strategy & budget aligned with Swan’s business objectives and risk appetite

• Make security understandable and actionable: explain risks, trade-offs and costs in clear business language to the Executive, Risk and Security Committees

• Lead, coach and develop a team of ~4 across Security Engineering & GRC growing their scope, judgment and influence in a high-trust environment with ownership

Steer cyber risk, compliance and trust

• ISMS leader you own ICT risk management, co-chair the Security Committee, run the Management Review, report monthly at Risk Committee and sign off policies

• Drive audit and certification readiness and regulatory compliance, including internal audits

• Represent Swan’s security maturity and risk posture to regulators, auditors, banking partners, enterprise customers and insurers

Lead security operations and resilient technology

• Steer Security projects with your teams and other departments and stay close to the substance: delivery, controls, metrics

• Set expectations for security (threat intelligence, security monitoring, secure-by-design) and privacy, steer business continuity and disaster recovery governance and is senior escalation point for major incidents

• Address emerging risks such as AI security, and support the fraud and anti-abuse teams on our payment flows

✨ Curious about your future team?

The team, 4 people, covers Security Engineering including security monitoring, incident response, governance, risk and audit programmes, ISMS.