Senior GRC Lead: Information Security (Hybrid, Stock)

Bitpanda; Barcelona; Hybrid; EUR 90,000 - 150,000; Full time

Benefits offered by this job

Hybrid working model

Stock option plan

OpenUP mental wellbeing resources

Udemy courses

Job summary

Bitpanda is seeking an Information Security Senior Specialist to lead and scale major elements of our security governance in a regulated fintech environment. You will own cross-functional GRC domains, drive improvement in control effectiveness, and advise senior stakeholders.

You will manage end-to-end GRC programs, strengthen risk controls, and collaborate with teams across engineering, operations, and procurement to ensure regulatory readiness and durable remediation.

Qualifications

• 6–10 years of experience in information security GRC, audit/assurance, risk management, compliance, or related roles.
• Proven track record leading audits/assessments and remediation.
• Strong knowledge of ISO 27001, DORA, SOC 2 / PCI DSS / NIST as applicable.

Responsibilities

• Own and evolve GRC domains end-to-end (ISMS, BCM, risk governance).
• Drive control rationalization and proportionality for critical assets.
• Lead audits and assessments, including regulator-facing engagements.
• Develop and run risk-based control testing programs and remediation plans.
• Collaborate with Procurement/Legal on security requirements for critical vendors.

Skills

ISO 27001

GRC management

Audit & assurance

Regulatory readiness

Vendor risk management

Risk assessment

Executive communication

Cloud security

Job description

Bitpanda is seeking an Information Security Senior Specialist to lead and scale major elements of our security governance in a regulated fintech environment. You will own cross-functional GRC domains, drive improvement in control effectiveness, and advise senior stakeholders.

You will manage end-to-end GRC programs, strengthen risk controls, and collaborate with teams across engineering, operations, and procurement to ensure regulatory readiness and durable remediation.