Expert, Information Security
Bitpanda helps users invest in stocks, cryptocurrencies, metals, and ETFs through a regulated European platform with fractional investing from €1.
Funding history
Projects
About Bitpanda
Bitpanda helps European users invest in cryptocurrencies, stocks, ETFs, precious metals, and commodities through a regulated fintech platform. Users can trade fractional shares, access early-stage crypto projects, earn staking rewards, and spend investments via debit card. The platform combines diverse asset classes with European regulatory compliance and multi-asset support.
Skills
About the Role
You will act as a senior individual contributor who sets direction and solves the hardest GRC problems in a regulated fintech environment. You will shape security governance strategy, keep the control framework effective as the business scales, and advise security leadership and senior stakeholders on risk and compliance decisions. You will lead complex, high-impact initiatives, own audit and assurance approaches, act as subject matter expert in areas such as ISO 27001, DORA and third-party risk, and mentor others while setting standards and reusable artifacts.
Requirements
- Typically 7–10+ years of experience in information security GRC, audit/assurance, security risk, compliance, software engineering and/or financial services risk roles
- Demonstrated ownership of complex, multi-stakeholder GRC programs and navigation of audits and regulatory scrutiny
- Deep working knowledge of ISO 27001 and DORA, and familiarity with SOC 2, NIST CSF, BaIT, COBIT
- Strong technology risk understanding across cloud, IAM, SDLC governance, incident management, vulnerability management, logging/monitoring and crypto/fintech operational processes
- Ability to influence across the organisation and resolve conflicts with a risk-based approach
Responsibilities
- Define a multi-year GRC roadmap aligned to business strategy, risk appetite and regulatory expectations
- Drive control framework evolution and establish governance principles such as minimum control baselines and exception governance
- Advise leadership on risk acceptance, remediation prioritisation, control investments and scope decisions
- Produce executive-grade outputs such as risk narratives, board materials and regulator/customer responses
- Facilitate senior stakeholder alignment when priorities conflict
- Own strategy and approach for major audits and assurance activities (ISO 27001, SOC 2, regulatory examinations, client due diligence)
- Lead responses to complex audit and regulatory issues including root-cause analysis and corrective action programs
- Act as SME for ISMS/ISO 27001, DORA, third-party risk or security control assurance
- Set standards and reusable artifacts such as control narratives, evidence templates, testing methodologies and playbooks
- Mentor specialists and associates
- Partner with Security Engineering, IT and Compliance to embed controls into workflows
Benefits
- Hybrid working model with an additional 25 days per year to work from a city or country of your choice
- Stock option plan participation
- Confidential coaching, counselling and mental health resources via OpenUP
- 3 additional days of paid time off after 6 months
- Unlimited access to Udemy online courses
- Discounts, rewards and perks from partners worldwide
- Up to 8 additional weeks of gender-neutral new parent leave
- Free onsite dining in Vienna, Bucharest, Barcelona and Berlin
- Tenure recognition and rewards
- Bitpanda-branded merchandise
- Company events
