GRC & InfoSec Specialist: Audit, Risk & Compliance

Bitpanda; Barcelona; Hybrid; EUR 65,000 - 95,000; Full time

Benefits offered by this job

Hybrid work

Stock options

OpenUP coaching

Udemy course access

Extra 3 days PTO (2027)

Job summary

Bitpanda is seeking an Information Security Specialist to mature governance, risk, and compliance in a regulated fintech environment. You will own GRC domains, drive control design, and partner with teams to scale security governance across the organization.

You’ll lead audits, risk assessments, third‑party risk, and continuous improvement with high autonomy, influencing how we scale security as Bitpanda grows.

Qualifications

• 4–7 years of experience in GRC, audit/assurance, security risk management, compliance, or information security.
• Strong working knowledge of ISO 27001 and ability to map requirements to controls and evidence.
• Experience leading audits or major assessments from planning through closure.
• Security fundamentals across IAM, SDLC governance, incident management, vulnerability management and monitoring.
• Excellent written communication for policy and audit-ready narratives.

Responsibilities

• GRC domain ownership and program maturity with measurable outcomes.
• Coordinate audits end-to-end, translate requirements into control impacts and guidance.
• Facilitate risk assessments, drive risk treatment plans and clear reporting.
• Lead third-party risk management and embed security requirements with Legal/Procurement.
• Design and run control testing plans and drive cross-functional improvements.

Skills

GRC ownership

ISO 27001

Audits & assurance

Risk management

Third-party risk

IAM basics

SDLC governance

Vulnerability management

Incident management

Executive communication

Job description

Bitpanda is seeking an Information Security Specialist to mature governance, risk, and compliance in a regulated fintech environment. You will own GRC domains, drive control design, and partner with teams to scale security governance across the organization.

You’ll lead audits, risk assessments, third‑party risk, and continuous improvement with high autonomy, influencing how we scale security as Bitpanda grows.