Senior Information Security & GRC Leader

Neobankbeat; Barcelona; Hybrid; EUR 110,000 - 140,000; Full time

Benefits offered by this job

Hybrid work model

Stock options

OpenUP coaching & mental health

Udemy access

New parent leave (8 weeks)

On-site meals (Vienna, Bucharest, BCN,

Job summary

Bitpanda is seeking an Information Security Expert (GRC) to shape governance strategy and lead high-impact audits in a regulated fintech setting. You will guide risk decisions, produce executive-level narratives, and collaborate with security leadership and business stakeholders.

You’ll own major audits, map control maturity, and mentor teams across regions. Enjoy hybrid work, generous leave, and ongoing professional growth through Udemy and stock options.

Responsibilities

• Define multi-year GRC roadmap aligned to business strategy, risk appetite, and regulatory expectations (e.g., DORA readiness, audit strategy, control maturity targets).
• Advise leadership on material risk decisions: risk acceptance, remediation prioritisation, control investments, and scope decisions. Produce executive-grade outputs: risk narratives, board/committee materials, and regulator/customer responses with defensible rationale.
• Own strategy and approach for major audits/assurance activities (ISO 27001, SOC 2, regulatory examinations), including scope, positioning, and negotiation. Lead responses to complex audit/regulatory issues: root-cause analysis, corrective action programs, and sustained effectiveness verification.

Job description

Bitpanda is seeking an Information Security Expert (GRC) to shape governance strategy and lead high-impact audits in a regulated fintech setting. You will guide risk decisions, produce executive-level narratives, and collaborate with security leadership and business stakeholders.

You’ll own major audits, map control maturity, and mentor teams across regions. Enjoy hybrid work, generous leave, and ongoing professional growth through Udemy and stock options.