---
title: 'Information Security Manager (GRC Engineering) (m/f/d) at Pliant'
canonical: 'https://feeny.ai/job/information-security-manager-grc-engineering-m-f-d-pliant-helsinki-ey5eq9d3zqeg'
type: 'job'
last_seen: '2026-09-09'
---

# Information Security Manager (GRC Engineering) (m/f/d) at Pliant

- **Company:** Pliant
- **Location:** Helsinki, Finland
- **Employment:** full-time
- **Work type:** hybrid
- **Posted:** 2026-07-06
- **Last confirmed live:** 2026-09-09
- **Apply:** https://jobs.ashbyhq.com/pliant/2dfccfca-ab8e-43ff-b050-7c386722d9da

## Job description

## ABOUT US

Pliant is a European fintech specializing in B2B payment solutions. Our modular, API-first platform helps businesses streamline spending, improve cash flow, and integrate payments into their financial workflows. Designed for industries with complex payment needs, such as travel and fleet, Pliant enables greater efficiency, control, and profitability.

We serve two primary customer segments:

- Companies looking to optimize operational processes through intuitive apps and APIs, gaining control, automation, and financial flexibility through extended credit lines.
- Businesses such as financial software platforms, ERP providers, and banks that want to launch or enhance their credit card offerings using Pliant’s embedded finance and white-label solutions.

Founded in 2020 and headquartered in Berlin, Pliant supports over 4,000 businesses and more than 20 partners globally. As a licensed e-money institution (EMI), we issue credit cards in 11 currencies across more than 30 countries, helping companies streamline and simplify payments.

Learn more at www.getpliant.com http://www.getpliant.com

## ABOUT THE ROLE

We are built AWS-native and audited against SOC 2, PCI DSS v4.0.1, HIPAA, and DORA. We run compliance like we run infrastructure: instrumented, automated, and owned by people who can read a log before they write a policy.

We're looking for an Information Security Manager (m/f/d) with a builder's mindset who happens to specialize in compliance, not a policy writer who happens to use a compliance tool. You'll own SOC 2, PCI DSS, HIPAA, and DORA end-to-end, and you'll do it by building automation, not by chasing screenshots.

They will report directly to the CISO in a growing team and be open to working with our team in our office in Helsinki (hybrid).

## WHAT YOU`LL DO

- Build automated evidence pipelines against AWS, IAM, and our security stack (AWS, Wiz, Vanta, SentinelOne, Datadog), control monitoring that runs itself, maturing security and compliance status.
- Integrate compliance checks into CI/CD so drift gets caught before an auditor does.
- Extend our compliance automation platform (Vanta) with custom integrations where the defaults don't cover our control set.
- Own the security & compliance program (ISO 27001, SOC 2 Type 2, PCI DSS v4.0.1, HIPAA), audits, scoping, control testing, QSA/auditor relationships, risk register.
- Turn regulatory requirements into engineering-consumable specs and tickets, and track them to closure.
- Run vendor/third-party risk under DORA; support incident response from the compliance side.

## WHAT YOU`LL BRING

- 3+ years in security compliance, with real ownership of at least one full SOC 2 or PCI DSS audit cycle.
- Experience of working with Tech and engineering teams
- Working knowledge of at least two of: SOC 2, PCI DSS, HIPAA, DORA, applied to a real environment, not textbook.
- Experience managing external auditors/QSAs through to a delivered report.
- Excellent written communication, you'll write for engineers, auditors, and executives in the same week.
- Comfortable owning ambiguity with a small team behind you, not a large one.

## Nice to Have

- Experience at a regulated fintech, EMI, PSP, or bank.
- CISSP, CISA, CISM, or ISO 27001 Lead Auditor/Implementer.
- Experience with LLM-based tooling for security/compliance workflows.

## Why This Role

The foundations are already built. The mandate now is to make the next stage, GRC Engineering and real control automation. Direct access to the CISO, real autonomy, and a genuine say in security strategy.

## WHAT WE OFFER

- The opportunity to work in a growing team with big responsibilities that thrives on a strong exchange of knowledge and excellence
- Attractive remuneration
- Your choice of preferred OS, Windows or Mac
- Flat hierarchy and transparent communication in a relaxed, professional atmosphere
- Opportunity to develop your talent in a dynamic team with ambitious goals
- Flexibility and possibility to work remotely
- Company card with a monthly allowance for lunches, coffee, etc. with co-workers

Pliant is an equal opportunity employer. We welcome applications from people of all backgrounds, identities and abilities, and are committed to an inclusive hiring process. If you need any accommodations during the interview process, please let us know.

## About Pliant

## Company Overview
- **One-liner**: Pliant provides an API-first, modular B2B credit card platform that enables businesses to issue, manage, and track physical and virtual credit cards while streamlining payment processes and spend controls.
- **Entity Type**: Private (growth stage, backed by multiple venture capital investors)
- **Headquarters**: Berlin, Germany
- **Founded**: 2020
- **Founders**: Malte Rau and Fabian Terner

## Core Business
- **Primary industry**: Fintech – B2B payments, spend management, and card issuance.
- **Target customers**: B2B – businesses of all sizes (SMB to enterprise), banks and financial institutions (via CaaS/BaaS), and developers/API users.
- **Mission or purpose statement**: "Empower companies to grow by providing a smart way to pay that scales with their business." [getpliant.com](https://www.getpliant.com/en-us/about-pliant)

## Products & Services
- **Payment Apps**: Ready-to-use mobile and web applications for issuing cards, managing spend, tracking transactions, and integrating with accounting tools. Ideal for companies that want a full-featured solution out of the box.
- **Pro API**: A fully customizable API for businesses that need to issue cards at scale, automate workflows, and build custom integrations into their finance stack. Supports single-use virtual cards, spend controls, and real-time monitoring.
- **CaaS & BaaS (Card-as-a-Service & Banking-as-a-Service)**: White-label solutions for banks and fintechs to launch their own branded credit card programs, with Pliant handling compliance, card issuance, and processing under its e-money license.
- **Card & Spend OS**: The underlying operating system that powers all products, offering spend control, receipt management, accounting automation, and transaction insights.

## Market Standing
- **Valuation/Market Cap**: Not publicly available.
- **Key Metric**: Total funding amount not publicly disclosed; notable investors include **Alstin Capital**, **Motive Ventures**, **Speedinvest**, **SBI Investment**, **PayPal Ventures**, and **Illuminate Financial**. [getpliant.com](https://www.getpliant.com/en-us/about-pliant)
- **Notable Investors/Partners**: PayPal Ventures, Speedinvest, Alstin Capital, Motive Ventures, SBI Investment, Illuminate Financial.
- **Growth Signals**: 
  - Team of 250+ employees representing 35+ nationalities. [getpliant.com](https://www.getpliant.com/en/careers)
  - Offices in Berlin (HQ), London, New York, Paris, Munich, Vienna, Lisbon, and Helsinki. [getpliant.com](https://www.getpliant.com/en-us/about-pliant)
  - Licensed as an e-money institution (EMI) in the EU and certified ISO/IEC 27001:2022 and PCI DSS. [getpliant.com](https://www.getpliant.com/en)
  - High Glassdoor rating of 4.6/5 (as of Nov 2024). [getpliant.com](https://www.getpliant.com/en/careers)

## Competitive Advantages
- **API-first platform**: Fully programmable card issuance and spend management, enabling deep customization and automation for enterprises and developers.
- **Regulatory moat**: Holds an e-money license and multiple security certifications (ISO 27001, PCI DSS), making it a trusted partner for banks and regulated institutions.
- **Multi-product flexibility**: Offers everything from out-of-the-box apps to white-label CaaS/BaaS, covering a wide range of customer needs in one platform.
- **Real-time data & insights**: Provides granular transaction monitoring, customizable reporting, and seamless integration with accounting and ERP systems.

## Strategic Focus
- Expand geographically (already present across Europe and the US) and deepen partnerships with banks and fintechs through CaaS offerings.
- Continue enhancing the Pro API and automation capabilities to serve high-volume enterprise clients.
- Strengthen compliance and security infrastructure to maintain regulatory advantages.
- Grow headcount across engineering, sales, and data teams to support scaling.

## Why Work Here
- **Culture & values**: Emphasizes agility, kindness, openness, and having fun. Mission-driven team with a flat structure and collaborative environment. [getpliant.com](https://www.getpliant.com/en/careers)
- **Remote/hybrid policy**: Offers home office and remote work opportunities (many roles listed as *EU/UK remote*), plus flexible working hours. [getpliant.com](https://www.getpliant.com/en/careers)
- **Perks**: Learning & development budget, monthly lunch benefit, mobility perk, Bahncard, Wellhub membership, and regular team events.
- **Engineering culture**: 11 cross-functional teams, with visible investment in data, engineering, and product roles. Technology stack includes modern API-first development.
- **Glassdoor rating**: 4.6/5 (as of Nov 2024) – indicative of high employee satisfaction.

## Sources
1. [getpliant.com - Main site](https://www.getpliant.com/en)
2. [getpliant.com - About page](https://www.getpliant.com/en-us/about-pliant)
3. [getpliant.com - Careers page](https://www.getpliant.com/en/careers)
4. [linkedin.com - Pliant company page](https://www.linkedin.com/company/getpliant)
5. [getpliant.com - Careers (alternate)](https://www.getpliant.com/en-us/careers)

## Other roles at Pliant

- [Working Student - Partner Sales, Benelux and Nordics Market (m/f/d)](https://feeny.ai/job/working-student-partner-sales-benelux-and-nordics-market-m-f-d-pliant-berlin-ch6mzebm8qwd) — Berlin, Germany
- [Compliance Operations Intern (m/f/d)](https://feeny.ai/job/compliance-operations-intern-m-f-d-pliant-berlin-nsptyxankd0h) — Berlin, Germany
- [Partner Sales Manager (Inbound) (m/f/d)](https://feeny.ai/job/partner-sales-manager-inbound-m-f-d-pliant-berlin-p228zbkqmd30) — Berlin, Germany
- [Senior Software Engineer - Backend - Card & Transaction Platform *EU/UK remote* (m/f/d)](https://feeny.ai/job/senior-software-engineer-backend-card-transaction-platform-eu-uk-remote-m-f-d-ekzh2a8tpac4)
- [Working Student - Partner Sales, German Market (m/f/d )](https://feeny.ai/job/working-student-partner-sales-german-market-m-f-d-pliant-berlin-tqm88svtj27p) — Berlin, Germany
- [Customer Support Specialist - Accounting Integrations (m/f/d)](https://feeny.ai/job/customer-support-specialist-accounting-integrations-m-f-d-pliant-berlin-zc0psbfhvzjp) — Berlin, Germany
- [Intern People Operations](https://feeny.ai/job/intern-people-operations-pliant-berlin-exph9exf21f3) — Berlin, Germany
- [Senior Software Engineer - AI Experience EU/UK remote (m/f/d)](https://feeny.ai/job/senior-software-engineer-ai-experience-eu-uk-remote-m-f-d-pliant-remote-xavcgry204xr)
- [Engineering Manager - Authentication & Authorisation *remote* (m/f/d)](https://feeny.ai/job/engineering-manager-authentication-authorisation-remote-m-f-d-pliant-remote-vjq48jaknz8s)
- [Sales Solutions Consultant (m/f/d)](https://feeny.ai/job/sales-solutions-consultant-m-f-d-pliant-berlin-hnr71daahg6f) — Berlin, Germany