Senior InfoSec & GRC Leader (FinTech)

Bitpanda; Town of Vienna (WI); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Hybrid work model

25 days annual leave

Stock option plan

OpenUP mental wellbeing resources

Extra 3 paid days off after 6 months (

Udemy library access

Partner discounts & perks

Job summary

Bitpanda is seeking an Information Security Expert to shape governance, strategy, and evidence of controls in a regulated fintech environment. You will lead complex multi-entity initiatives and advise senior stakeholders on risk and compliance decisions, including regulator interactions.

You’ll own domain SME areas such as ISMS/DORA governance, control testing, and third-party risk, while enabling standards, templates and mentorship across teams.

Qualifications

• Lead complex, multi-entity GRC programs and audits.
• Deep knowledge of ISO 27001, DORA, and related controls.
• Ability to influence at leadership level and across teams.

Responsibilities

• Define multi-year GRC roadmap aligned to strategy and compliance.
• Advise leadership on risk decisions and produce executive outputs.
• Own audits/regulatory responses and evidence programs.
• Maintain domain SME in ISMS or DORA governance and risk mapping.
• Set standards, templates, and playbooks; mentor teams.

Skills

GRC strategy

Executive advisory

Regulatory compliance

Audit leadership

ISO 27001

DORA

NIST CSF

Cloud risk

Stakeholder influence

Job description

Bitpanda is seeking an Information Security Expert to shape governance, strategy, and evidence of controls in a regulated fintech environment. You will lead complex multi-entity initiatives and advise senior stakeholders on risk and compliance decisions, including regulator interactions.

You’ll own domain SME areas such as ISMS/DORA governance, control testing, and third-party risk, while enabling standards, templates and mentorship across teams.