Senior Security GRC Lead – Fintech, Hybrid + Stock Options

Bitpanda; Wien; Hybrid; EUR 90.000 - 130.000; Vollzeit

Benefits dieser Stelle

Hybrid working model

Stock option plan

Udemy access

Zusammenfassung

Bitpanda is seeking an Information Security Senior Specialist in Vienna to lead governance, risk and compliance in a regulated fintech. You will own ISMS, risk management, third-party risk, and drive evidence-based improvements across the organization.

You’ll partner with product and engineering, manage audits, and scale control testing. The role offers a hybrid setup, competitive compensation, stock options, and learning perks like Udemy access and wellbeing programs.

Qualifikationen

• Minimum 6–10 years of experience in information security GRC, audit, risk or related roles.
• Proven track record leading audits and remediation across multiple teams and systems.
• Strong knowledge of ISO 27001, DORA and related controls.
• Ability to translate regulatory requirements into practical security programs.

Aufgaben

• Own and evolve one or more GRC domains end-to-end, incl. ISMS and risk governance.
• Lead cross-functional risk assessments for new products and vendors.
• Design and run a risk-based control testing program.
• Set due diligence depth for critical suppliers and security contracts.
• Mentor teams and act as a GRC translator to engineering and operations.

Kenntnisse

GRC in information security

ISO 27001

DORA

SOC 2

PCI DSS

NIST

Cloud risk management

Executive communications

Vendor risk management

Jobbeschreibung

Bitpanda is seeking an Information Security Senior Specialist in Vienna to lead governance, risk and compliance in a regulated fintech. You will own ISMS, risk management, third-party risk, and drive evidence-based improvements across the organization.

You’ll partner with product and engineering, manage audits, and scale control testing. The role offers a hybrid setup, competitive compensation, stock options, and learning perks like Udemy access and wellbeing programs.