VP Security

About the role

Swan, an embedded banking specialist based in Paris, is looking for a VP Security to act as its senior security authority and Information Security Management leader. The role advises the CEO and ExCo on cyber risk, represents the company to regulators (ACPR/ECB), auditors and banking partners, and shapes how Product, Platform and Operations build and run securely. It reports directly to the CTO.

Key responsibilities

• Define and communicate security strategy and budget aligned with business objectives and risk appetite
• Explain risks, trade-offs and costs in clear business language to the Executive, Risk and Security Committees
• Lead, coach and develop a team of around four covering Security Engineering, security monitoring, incident response, governance, risk and audit programmes, and ISMS
• Steer cyber risk, compliance and trust, and lead security operations and resilient technology
• Own ICT risk management, co-chair the Security Committee, run the Management Review, report monthly to the Risk Committee and sign off policies
• Drive audit and certification readiness and regulatory compliance, including internal audits
• Represent security maturity and risk posture to regulators, auditors, banking partners, enterprise customers and insurers
• Steer security projects, set expectations for threat intelligence, security monitoring, secure-by-design and privacy, and govern business continuity and disaster recovery
• Act as senior escalation point for major incidents and address emerging risks such as AI security, while supporting fraud and anti-abuse teams

Required profile

• 10+ years of information security and security engineering experience
• Strategic thinking: turning business goals and risk appetite into a focused roadmap
• Strong executive presence and stakeholder management with board-level committees, regulators and auditors
• Risk-driven approach using risk quantification and data to prioritise work

Required skills

• Cloud security, identity and access management, network and application security, and security tooling
• Hands-on knowledge of ISO 27001, DORA and GDPR
• Nice to have: CISSP, CISM, CISA, CRISC or CCSP certification
• Nice to have: ISO 42001, EU AI Act and AI security experience
• Nice to have: regulated or critical environments such as banking, insurance, payments, PSD2, PCI DSS, ACPR

What we offer

• Meal vouchers for work days
• 25 days of holidays plus RTT
• Monthly mobility package
• Health insurance through Alan
• Discounts on sports and wellness subscriptions via Classpass
• Moka Care mental health and wellness support
• Hybrid remote option of two days per week