Senior Information Security & GRC Lead

Bitpanda; Wien; Hybrid; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Hybrid working model

Stock options

Mental wellbeing support

Udemy courses

Extra vacation days 2027

Job summary

Bitpanda is seeking an Information Security Senior Specialist to lead and scale governance in a regulated fintech environment. You’ll own cross-functional GRC domains and drive measurable control improvements while advising senior stakeholders.

Your responsibilities include ISMS/BCM operations, risk governance, third‑party risk, and compliance across key partnerships. You’ll design risk-based testing programs and translate regulatory requirements into practical work programs.

Qualifications

• Experience leading information security governance in fintech or regulated environments.
• Proven track record in audits, risk assessments, and remediation programs.
• Strong knowledge of ISO 27001, SOC 2, PCI DSS or NIST controls.

Responsibilities

• Own and scale GRC domains end-to-end (ISMS, BCM, risk governance).
• Drive control rationalization and strengthen evidence-based testing.
• Lead audits and assessments across multiple entities and vendors.
• Translate regulatory requirements into practical internal programs across the org.
• Mentor team members and enable cross-functional engagement with engineering and operations.

Skills

Information Security GRC

Audit & Assurance

Regulatory compliance

Risk management

ISO 27001

Cloud & IAM

Job description

Bitpanda is seeking an Information Security Senior Specialist to lead and scale governance in a regulated fintech environment. You’ll own cross-functional GRC domains and drive measurable control improvements while advising senior stakeholders.

Your responsibilities include ISMS/BCM operations, risk governance, third‑party risk, and compliance across key partnerships. You’ll design risk-based testing programs and translate regulatory requirements into practical work programs.