Senior Information Security & Compliance Manager (GRC Engineering) (m/f/d)

Stack

Responsibilities

• ▹Lead security compliance strategy, direction, and priorities while building a high-performing function
• ▹Oversee and expand Pliant's certification portfolio (ISO 27001, SOC 2, PCI, Cyber Essentials, HIPAA)
• ▹Partner with IT, Security, Legal, Product, and Engineering to integrate GRC requirements into business processes
• ▹Drive automation through scripting, coding, and AI-enabled approaches (compliance-as-code, policy-as-code)
• ▹Monitor regulatory changes and emerging frameworks to shape the team's roadmap
• ▹Manage relationships with third-party auditors, assessors, and consultants during audits and penetration tests
• ▹Strengthen security metrics and reporting, preparing regular business reviews

Requirements

• ▹Extensive experience in security compliance, audit, or related GRC work, including supporting external audits
• ▹Deep knowledge of frameworks such as SOC 2, ISO 27001, PCI-DSS, and HIPAA
• ▹Experience leading teams and developing people across a distributed organization
• ▹Strong understanding of cloud security, SaaS security models, and DevSecOps practices
• ▹A risk-based mindset that goes beyond checklist compliance
• ▹Comfort using automation, scripting, or AI-enabled approaches to improve program scale and efficiency
• ▹Excellent written and verbal communication for auditors, customers, and executives

Soft skills

What we offer

• ▹A growing team with big responsibilities and a strong knowledge-sharing culture
• ▹Attractive remuneration
• ▹Choice of preferred OS, Windows or Mac
• ▹Flat hierarchy and transparent communication
• ▹Opportunity to develop your talent in an ambitious team
• ▹Flexibility and possibility to work remotely
• ▹Company card with a monthly allowance for lunches and coffee with co-workers

About the company

Pliant is a European fintech founded in 2020 and headquartered in Berlin, specializing in B2B payment solutions. Its API-first platform serves over 4,000 businesses, and as a licensed e-money institution it issues credit cards in 11 currencies across more than 30 countries.