Senior InfoSec GRC Leader - Fintech, Audit & Compliance

Bitpanda; Barcelona; Hybrid; EUR 120,000 - 190,000; Full time

Benefits offered by this job

Hybrid working model

Stock option plan

OpenUP mental health resources

Extra 3 days time off after 6 months

Udemy course access

Worldwide partner discounts

Job summary

Bitpanda is seeking an Information Security Expert for GRC leadership in Barcelona. You shape governance, drive an evolving control framework, and advise executives on risk and compliance in a regulated fintech environment.

You will collaborate across teams to ensure audits and regulatory readiness (ISO 27001, SOC 2, DORA), mentor others, and elevate security controls with practical, evidence-based approaches.

Qualifications

• 7–10+ years in information security GRC, audit, or risk roles.
• Proven ownership of complex multi-stakeholder GRC programs.
• Deep knowledge of ISO 27001, DORA, SOC 2, and NIST CSF.

Responsibilities

• Define multi-year GRC roadmap aligned to business strategy and regulatory expectations.
• Lead control framework evolution to reduce duplication and ensure proportionality.
• Advise leadership on risk decisions and produce executive-grade outputs.
• Own strategy for major audits and regulatory examinations.
• Coach and mentor teams; embed controls into workflows.

Skills

GRC leadership

ISO 27001

DORA readiness

Audit & assurance

Regulatory compliance

Risk management

Cloud & IAM risk

Job description

Bitpanda is seeking an Information Security Expert for GRC leadership in Barcelona. You shape governance, drive an evolving control framework, and advise executives on risk and compliance in a regulated fintech environment.

You will collaborate across teams to ensure audits and regulatory readiness (ISO 27001, SOC 2, DORA), mentor others, and elevate security controls with practical, evidence-based approaches.