PbInformation Security Manager (Part-time / Full-time – 20h/40h) /b /ppbLocation: /b Spain (Hybrid / Remote) /ppAbout Nebeus /ppNebeus is an all-in-one app that effortlessly merges multi-currency payments, virtual IBANs, cryptocurrency services, and cutting-edge cards, empowering users globally to navigate their dynamic work lifestyles. Nebeus’ vision is rooted in financial inclusivity, where everyone, regardless of location, can securely and simply manage their finances while monetizing their skills and talents. /ppbKey facts: /b /pulliFounded in 2014, backed by ex-VC executives, Seedrs, and the UK government's Future Fund /liliNebeus is a multi-cultural and international team spread across London and Barcelona /li /ulpRole Mission /ppThe bInformation Security Manager /b will be responsible for defining, implementing, and maintaining the company’s information security framework and ICT risk management strategy. /ppThis role ensures the protection of digital assets and compliance with applicable regulations, working closely with IT, Compliance, and external partners where necessary. /ppThis position is designed for an bautonomous, hands-on professional /b who will lead the information security function while coordinating with cross-functional teams and leveraging external providers when required. /ppKey Responsibilities /pulliDefine, implement, and maintain information security policies, procedures, and controls /liliConduct ICT risk assessments and develop mitigation plans /liliEnsure compliance with applicable regulations and frameworks (e.g. DORA, ISO 27001, ENS) /liliCoordinate internal and external security audits /liliOversee access management, backups, and core cybersecurity controls /liliLead and coordinate the response to security incidents /liliAssess and manage third-party and vendor risks /liliPromote a strong security culture through internal training and awareness initiatives /liliCollaborate closely with IT, Compliance, and the DPO /liliChair the ICT Committee and report regularly to the Board and ExCo on the Group’s security posture and key risks /liliOwn and maintain the Group’s ICT risk register, ensuring alignment with the broader enterprise risk management framework /liliOversee security architecture decisions across cloud infrastructure, applications, and third-party integrations /liliManage regulatory reporting obligations related to ICT incidents /liliOversee the Group’s Business Continuity Plan (BCP) and Disaster Recovery (DR) programmes /liliOwn and maintain the incident response framework /li /ulpRequirements /pulli2–5 years of experience in Information Security, Cybersecurity, or IT Risk /liliPractical knowledge of security frameworks such as ISO 27001, ENS, or equivalent /liliExperience working in regulated environments /liliAbility to work independently with a structured and proactive approach /liliStrong business-oriented mindset with a pragmatic approach to problem-solving /liliExcellent communication skills and ability to work cross-functionally /liliFluency in English and Spanish /li /ulpWhat We Offer /pulliA full-time permanent contract /lili25 days’ holiday /liliA shorter work day on Fridays /liliHealth insurance package /liliA brand new MacBook /liliRefund of training courses relevant to your career and role at Nebeus /li /ul