Allfunds is a leading global dealing and distribution platform in the wealth management industry. Distinguished by its buy-free model, the breadth of its distribution network, strong global and local execution capabilities, and value-added services, Allfunds has a longstanding track record of delivering growth, with AuA at a historic high of €1.76 trillion (as of 31 December 2025).

Allfunds seamlessly connects end-to-end over 1,450 fund partners and more than 900 distributors across 66 countries. Channeling savings into investments, Allfunds offers a comprehensive suite of products including mutual funds, ETFs, and alternatives on a scalable technology platform. Allfunds has 17 offices in major financial hubs across four continents including Bogotá, Dubai, Hong Kong, London, Luxembourg, Madrid, Miami, Milan, Paris, Santiago, São Paulo, Shanghai, Singapore, Stockholm, Valencia, Warsaw, and Zurich. Allfunds is a truly global business with more than 1,000 employees and a culture of innovation and entrepreneurship.

If you're adaptable, open to new opportunities, and enjoy working with diverse teams, Allfunds is the right place for you. Explore the role below and apply to become part of our team.

Reporting to the CISO, the Head of GRC will be responsible for:

Leading, maintaining and continuously improving the Information Security Management System (ISMS) and cybersecurity governance framework.
Maintaining information security policies, standards and procedures, ensuring appropriate governance, documentation and control.
Establishing, maintaining and monitoring the Cybersecurity Strategic Plan, aligned with business priorities, regulatory requirements and the cybersecurity risk landscape.
Leading the identification, assessment, treatment, acceptance and monitoring of information security and cyber risks.
Ensuring cybersecurity risk assessments are performed for relevant systems, processes, technology changes, third parties and outsourcing arrangements.
Providing cybersecurity regulatory support and ensuring alignment with applicable requirements, including DORA, EBA, CSSF, MAS, GDPR, ENS, ISO 27001 and NIST.
Managing internal and external security audits, certifications and regulatory assessments, including the monitoring and remediation of findings and recommendations.
Leading the cybersecurity component of Third-Party Risk Management, including security assessment, approval and ongoing monitoring of technology providers and outsourcing arrangements.
Leading the Security Awareness Program, including general training and targeted campaigns based on specific risk profiles.
Coordinating security-related privacy matters with the Data Protection Officer (DPO).
Coordinating cybersecurity governance and assurance activities with the Second and Third Lines of Defence (2LoD and 3LoD).
Defining and reporting cybersecurity KPIs and KRIs, providing management with visibility of risk, compliance, control effectiveness and remediation activities.
Supporting customer security Due Diligence processes and security questionnaires.

Qualifications

Bachelor's or Master's degree in Cybersecurity, Information Security, Computer Science, Engineering, Risk Management or a related field.
Minimum 7 years of experience in Information Security, Cybersecurity GRC, Technology Risk, Audit or Regulatory Compliance, preferably within financial services or another regulated industry.
Strong knowledge of ISO 27001, NIST CSF, DORA, GDPR and ENS, together with experience in risk management, audit and third-party risk management.
Relevant certifications such as ISO 27001 Lead Auditor/Implementer, CISM, CISSP, CRISC or CISA are highly valued.
Strong leadership, analytical and problem-solving capabilities.
Ability to translate cybersecurity and regulatory requirements into clear business risks, priorities and actions.
Excellent stakeholder-management and communication skills, including interaction with senior management, auditors and regulators.
Excellent written and verbal communication skills in English and Spanish.
High level of autonomy, organization, attention to detail and ability to operate effectively in a complex international environment.

What We Believe In

All for Excellence

We bring together our expertise, experience, and passion to deliver excellence in everything we do. By holding ourselves to the highest standards, we ensure that our clients, employees, and partners can always rely on us.

All for Accountability

We take ownership of our actions and decisions, acting with transparency, integrity, and responsibility towards our colleagues, clients, and the communities we serve.

All for Empowerment

We continuously evolve our tools, services, and ways of working to empower our clients and people, helping them succeed with confidence and efficiency.

All for Inspiration

People are our driving force. We are committed to supporting their growth, understanding their needs, and inspiring them to achieve their goals and reach their full potential.

Diversity, Equity & Inclusion

At Allfunds, Human Capital is at the heart of our strategy, our success, and our ESG commitments. We believe that fostering a diverse, equitable, and inclusive workplace strengthens our business and enables our people to thrive.

Diversity

We value the unique backgrounds, experiences, perspectives, and characteristics that make each individual different and contribute to a richer, more innovative workplace.

Equity

We are committed to ensuring fair treatment, equal opportunities, and access to growth and development for all employees through inclusive policies and practices.

Inclusion

We foster an environment where everyone feels welcomed, respected, supported, and valued, and where every individual can contribute authentically and perform at their best.

Together, Diversity, Equity and Inclusion help us build a workplace where everyone has the opportunity to grow, succeed, and make a meaningful impact.