Senior GRC & InfoSec Associate (FinTech)

Neobankbeat; Wien; Hybrid; EUR 65,000 - 90,000; Full time

Benefits offered by this job

Hybrid working model

Stock option plan

Udemy courses

OpenUP mental health resources

3 extra days off after 6 months

Onsite dining in Vienna

Job summary

Bitpanda in Vienna is seeking an Information Security Senior Associate to advance our GRC program within a regulated fintech environment. You will own domain execution, coordinate internal and external audits end-to-end, and drive risk management with clear KRIs and leadership reporting.

This hybrid role offers a flexible work model, a competitive compensation package with stock options, and ongoing learning opportunities.

Qualifications

• 2–4 years of experience in GRC, audit, security risk management, or compliance.
• Strong knowledge of ISO 27001 or similar frameworks and the ability to map requirements to real operational processes.
• Hands-on experience coordinating audits or risk assessments from planning through closure.
• Solid grasp of IAM, SDLC, incident and vulnerability management, logging/monitoring, third-party risk.
• Excellent communication skills

Responsibilities

• GRC domain execution: Manage daily operations of assigned GRC domains, track yearly plans, and build scalable playbooks to reduce audit friction and improve control consistency.
• Assurance audits: Coordinate internal and external audits end-to-end (planning, evidence gathering, auditor QA, remediation). Translate regulatory requirements into actionable plans and draft formal audit responses.
• Risk management: Facilitate risk assessments for systems and products. Drive treatment plans with owners, escalate unacceptable residual risks, and prepare clear KRI/KPI reporting for leadership.
• Third-party risk management: Drive vendor due diligence by evaluating security evidence and tracking remediation. Partner with Legal and Procurement to embed security obligations into contracts.

Skills

GRC knowledge

Audit coordination

Security risk management

ISO 27001

Security fundamentals

Communication skills

Job description

Bitpanda in Vienna is seeking an Information Security Senior Associate to advance our GRC program within a regulated fintech environment. You will own domain execution, coordinate internal and external audits end-to-end, and drive risk management with clear KRIs and leadership reporting.

This hybrid role offers a flexible work model, a competitive compensation package with stock options, and ongoing learning opportunities.