VP Security

Il y a 1 semaine

Paris, Île-de-France SWAN Temps plein
About

Swan is Europe’s embedded banking specialist. We empower software companies to embed banking features like accounts, cards, and payments directly into their products, under their own brand.Swan processes over €2.5 billion in monthly transactions for more than 150 companies—like Pennylane, Indy, Agicap, Libeo, and Lucca. Founded in 2019, the company has received growth capital from leading investors such as Lakestar, Accel, Creandum, Bpifrance and Eight Roads. Swan is a principal member of Mastercard and a licensed financial institution, regulated by the French banking authority (ACPR).


Compétences, expérience, qualifications : si vous correspondez à cette opportunité, alors n'hésitez pas à postuler dès aujourd'hui.
Banking belongs in business software

Many software companies already serve small businesses incredibly well: helping them send invoices, run payroll, manage inventory, and more. They’re on a mission to become the central hub for managing every aspect of business life.

About

Swan is Europe’s embedded banking specialist. We empower software companies to embed banking features like accounts, cards, and payments directly into their products, under their own brand.Swan processes over €2.5 billion in monthly transactions for more than 150 companies—like Pennylane, Indy, Agicap, Libeo, and Lucca. Founded in 2019, the company has received growth capital from leading investors such as Lakestar, Accel, Creandum, Bpifrance and Eight Roads. Swan is a principal member of Mastercard and a licensed financial institution, regulated by the French banking authority (ACPR).

Banking belongs in business software

Many software companies already serve small businesses incredibly well: helping them send invoices, run payroll, manage inventory, and more. They’re on a mission to become the central hub for managing every aspect of business life.

But when it comes to financial workflows, there’s still a gap. Too many critical tasks like managing cash flow, tracking payments, or reconciling accounts happen outside the software, across spreadsheets, email threads.

It’s a missed opportunity. Business software shouldn’t just record financial activity — it should run it.

To learn more about us: About Swan ; Career.

Job DescriptionYour mission

As VP Security, you are Swan’s senior security authority and Information Security Management Leader. You advise the CEO and ExCo on cyber risk, represent Swan to regulators (ACPR/ECB), auditors and banking partners, and shape how Product, Platform and Operations build and run securely. You'll report directly to the CTO.

At Swan, we believe perfect security does not exist. Good leadership here means making explicit, informed, risk-based trade-offs and focusing resources where they have the greatest impact.

Your responsibilitiesLeadership & Management
  • Define and communicate security strategy & budget aligned with Swan's business objectives and risk appetite
  • Make security understandable and actionable: explain risks, trade-offs and costs in clear business language to the Executive, Risk and Security Committees
  • Lead, coach and develop a team of ~4 across Security Engineering & GRC growing their scope, judgment and influence in a high-trust environment with ownership
Steer cyber risk, compliance and trust
  • ISMS leader you own ICT risk management, co-chair the Security Committee, run the Management Review, report monthly at Risk Committee and sign off policies
  • Drive audit and certification readiness and regulatory compliance, including internal audits
  • Represent Swan's security maturity and risk posture to regulators, auditors, banking partners, enterprise customers and insurers
Lead security operations and resilient technology
  • Steer Security projects with your teams and other departments and stay close to the substance: delivery, controls, metrics
  • Set expectations for security (threat intelligence, security monitoring, secure-by-design) and privacy, steer business continuity and disaster recovery governance and is senior escalation point for major incidents
  • Address emerging risks such as AI security, and support the fraud and anti-abuse teams on our payment flows
Curious about your future team?

The team, 4 people, covers Security Engineering including security monitoring, incident response, governance, risk and audit programmes, ISMS.

Preferred ExperienceYou’re a great match if:Security & Technical Leadership
  • Extensive security experience: 10+ years in information security & security engineering
  • Deep technical expertise: strong understanding of cloud security, identity and access management, network and application security, and security tooling
  • Governance, risk & compliance: hands-on knowledge of ISO 27001, DORA and GDPR
Leadership & Management
  • Strategic thinking: turns business goals and risk appe