Senior InfoSec & GRC Lead

Bitpanda GmbH; Wien; Hybrid; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Stock option plan

Hybrid working model

Udemy access

OpenUP mental wellbeing support

New parent leave

Job summary

Bitpanda is seeking an Information Security Senior Specialist to lead and scale major elements of our security governance in a fintech environment. You will own cross‑functional GRC domains, drive measurable improvements in control effectiveness, and advise senior stakeholders across the business.

You will oversee operating models for GRC, drive risk assessments, manage complex audits, and lead third‑party risk oversight.

Qualifications

• 6–10 years of experience in information security GRC, audit/assurance, risk management, compliance, or adjacent security roles.
• Proven track record leading audits/assessments and remediation across multiple teams.
• Strong knowledge of ISO 27001 and DORA (and/or SOC 2 / PCI DSS / NIST).
• Solid understanding of technology risk across cloud, IAM, SDLC governance, incident management, vulnerability management, logging/monitoring, and third‑party risk.
• Excellent written and verbal communication; able to produce executive‑ready materials and auditor‑facing narratives.

Responsibilities

• Information Security Operating Model & GRC Ownership: Own and evolve one or more GRC domains end-to-end, including strategy, annual plan, cadences, and success metrics.
• Risk Management & Strategic Decision Support: Facilitate and challenge high‑impact risk assessments and drive risk treatment at scale.
• Audit, Assurance & Continuous Control Testing: Lead audits and assessments end-to-end, including readiness, walkthroughs, and remediation.
• Third‑Party Risk & Critical Supplier Oversight: Set due diligence depth for critical suppliers and collaborate with Procurement/Legal on security contracts.
• Enablement & Leadership through Others: Mentor team members and translate security requirements for engineering and operations.

Skills

GRC leadership

Audit experience

ISO 27001

Cloud risk

IAM governance

Stakeholder comms

Job description

Bitpanda is seeking an Information Security Senior Specialist to lead and scale major elements of our security governance in a fintech environment. You will own cross‑functional GRC domains, drive measurable improvements in control effectiveness, and advise senior stakeholders across the business.

You will oversee operating models for GRC, drive risk assessments, manage complex audits, and lead third‑party risk oversight.