Information Security GRC Lead

Bitpanda; Wien; Hybrid; EUR 70,000 - 110,000; Full time

Benefits offered by this job

Hybrid work

Stock options

Mental health support

Udemy access

Parent leave

Onsite dining

Job summary

Bitpanda is seeking an Information Security Specialist in Vienna to own and mature governance, risk, and compliance programs within a regulated fintech environment. You will drive control design, testing, and remediation with cross‑functional teams and thrive in a fast‑paced, autonomous role that shapes how Bitpanda scales security governance as the company grows.

The role emphasizes audits, regulatory readiness, third‑party risk, and continuous improvement, with hybrid work and strong growth

Qualifications

• 4–7 years of experience in GRC, audit/assurance, security risk management, compliance, or information security.
• Strong working knowledge of ISO 27001 (or comparable frameworks) and ability to map requirements to controls, evidence, and real operational processes.
• Experience leading audits/assessments or significant parts of them (planning through closure).
• Security fundamentals across IAM, SDLC governance, incident management, vulnerability management, logging/monitoring, and third‑party risk concepts.
• Excellent written communication: can produce policy/control documentation and audit‑ready narratives with minimal supervision.

Responsibilities

• GRC domain ownership & program maturity: Own one or more GRC domains and develop yearly plans, cadence, and measurable outcomes; build scalable processes and playbooks.
• Assurance, audits & regulatory readiness: Coordinate internal and external audits end‑to‑end; translate regulatory and customer requirements into control impacts and guidance; draft audit responses and risk documentation.
• Risk management & decision support: Facilitate risk assessments for systems/products; ensure consistent scoring and clear treatment decisions; drive risk treatment plans.
• Third‑party risk management: Lead due diligence for critical vendors; embed security requirements into contracts and oversee renewals and reviews.
• Control testing & continuous improvement: Design and run a risk‑based control testing plan; drive improvements and introduce automation for evidence collection and health reporting.

Skills

GRC

Audit & Assurance

Security risk mgmt

ISO 27001

Tools

SIEM

IAM

Vulnerability scanning

Job description

Bitpanda is seeking an Information Security Specialist in Vienna to own and mature governance, risk, and compliance programs within a regulated fintech environment. You will drive control design, testing, and remediation with cross‑functional teams and thrive in a fast‑paced, autonomous role that shapes how Bitpanda scales security governance as the company grows.

The role emphasizes audits, regulatory readiness, third‑party risk, and continuous improvement, with hybrid work and strong growth