Senior Information Security & GRC Leader

Bitpanda; Wien; Hybrid; EUR 120,000 - 180,000; Full time

Benefits offered by this job

Stock option plan

Udemy courses

OpenUP coaching

Extra paid time off

Onsite dining

Partner perks

New parent leave

Job summary

Bitpanda is seeking an Information Security Expert to lead GRC strategy and governance across a regulated fintech environment. You will shape risk-based strategies, align controls to regulatory expectations, and advise security leadership on risk and compliance decisions.

You will own auditable processes, collaborate with audit teams, and drive evidence-based control improvements across multi-entity setups in a fast-paced tech company.

Qualifications

• 7–10+ years in information security GRC, audit, risk, or compliance.
• Experience with complex multi-entity audits and regulatory scrutiny.
• Deep knowledge of ISO 27001, DORA; familiarity with SOC 2, NIST CSF, BaIT, COBIT.

Responsibilities

• GRC strategy & roadmap development.
• Executive advisory & decision support.
• Regulatory, audit & assurance leadership.
• Domain SME ownership: ISMS/ISO 27001, DORA, third‑party risk.
• Enablement, standards & mentorship.

Skills

GRC governance

ISO 27001

DORA

SOC 2

NIST CSF

Cloud security

IAM

SDLC governance

Incident management

Vulnerability management

Job description

Bitpanda is seeking an Information Security Expert to lead GRC strategy and governance across a regulated fintech environment. You will shape risk-based strategies, align controls to regulatory expectations, and advise security leadership on risk and compliance decisions.

You will own auditable processes, collaborate with audit teams, and drive evidence-based control improvements across multi-entity setups in a fast-paced tech company.