Information Security Manager (GRC Engineering) (m/f/d)

Stack

Responsibilities

• ▹Build automated evidence pipelines against AWS, IAM, and the security stack (AWS, Wiz, Vanta, SentinelOne, Datadog) with self-running control monitoring
• ▹Integrate compliance checks into CI/CD so drift gets caught before an auditor does
• ▹Extend the compliance automation platform (Vanta) with custom integrations where defaults don't cover the control set
• ▹Own the security & compliance program (ISO 27001, SOC 2 Type 2, PCI DSS v4.0.1, HIPAA): audits, scoping, control testing, QSA/auditor relationships, risk register
• ▹Turn regulatory requirements into engineering-consumable specs and tickets, tracking them to closure
• ▹Run vendor/third-party risk under DORA and support incident response from the compliance side

Requirements

• ▹3+ years in security compliance, with real ownership of at least one full SOC 2 or PCI DSS audit cycle
• ▹Experience working with tech and engineering teams
• ▹Working knowledge of at least two of: SOC 2, PCI DSS, HIPAA, DORA, applied to a real environment
• ▹Experience managing external auditors/QSAs through to a delivered report
• ▹Excellent written communication for engineers, auditors, and executives
• ▹Comfortable owning ambiguity with a small team

Nice to have

• ▹Experience at a regulated fintech, EMI, PSP, or bank
• ▹CISSP, CISA, CISM, or ISO 27001 Lead Auditor/Implementer certification
• ▹Experience with LLM-based tooling for security/compliance workflows

Soft skills

What we offer

• ▹Growing team with big responsibilities and a strong knowledge-sharing culture
• ▹Attractive remuneration
• ▹Choice of preferred OS, Windows or Mac
• ▹Flat hierarchy and transparent communication
• ▹Opportunity to develop in a dynamic, ambitious team
• ▹Flexibility and remote work possibility
• ▹Company card with a monthly allowance for lunches, coffee, etc.

About the company

Pliant is a Berlin-headquartered European fintech specializing in B2B payment solutions via a modular, API-first platform. Founded in 2020, it supports over 4,000 businesses and 20+ partners globally, and as a licensed e-money institution (EMI) issues credit cards in 11 currencies across more than 30 countries.