InfoSec GRC Lead – Fintech Compliance & Risk

Bitpanda; Town of Vienna (WI); Hybride; USD 89 000 - 134 000; Plein temps

Avantages offerts par ce poste

Hybrid working model

Stock option plan

OpenUP mental health resources

Extra paid time off (PT0)

Résumé du poste

Bitpanda is seeking an Information Security Specialist to own governance, risk, and compliance efforts in a regulated fintech environment. You will manage GRC domains, drive audit readiness, perform risk assessments, and partner with legal/procurement to strengthen security across the organization.

You’ll operate with high autonomy, influence across teams, and contribute to scalable security governance as the company grows.

Qualifications

• 4–7 years of experience in GRC, audit, security risk management, compliance, or information security.
• Strong working knowledge of ISO 27001 and mapping requirements to controls, evidence, and processes.
• Experience leading audits or significant parts of them from planning through closure.
• Security fundamentals across IAM, SDLC governance, incident management, vulnerability management, logging/monitoring, and third‑party risk concepts.
• Excellent written communication for policy/control documentation and audit-ready narratives.

Responsabilités

• GRC domain ownership and program maturity with yearly plans and measurable outcomes.
• Coordinate internal and external audits end-to-end including evidence strategy and remediation verification.
• Facilitate risk assessments and drive risk treatment plans with clear ownership.
• Lead third‑party risk due diligence and embed security requirements into contracts.
• Design and run a risk-based control testing plan with repeatable processes and dashboards.

Connaissances

GRC ownership

ISO 27001

Audit management

Regulatory readiness

Risk assessment

Third-party risk

Control testing

Description du poste

Bitpanda is seeking an Information Security Specialist to own governance, risk, and compliance efforts in a regulated fintech environment. You will manage GRC domains, drive audit readiness, perform risk assessments, and partner with legal/procurement to strengthen security across the organization.

You’ll operate with high autonomy, influence across teams, and contribute to scalable security governance as the company grows.