Lead Information Security

Bitpanda helps users invest in stocks, cryptocurrencies, metals, and ETFs through a regulated European platform with fractional investing from €1.

Maintainer signals as of 9/25/2026

Stella-Klein-Löw Weg 17, 1020 Vienna, Austria
About Bitpanda

Bitpanda helps European users invest in cryptocurrencies, stocks, ETFs, precious metals, and commodities through a regulated fintech platform. Users can trade fractional shares, access early-stage crypto projects, earn staking rewards, and spend investments via debit card. The platform combines diverse asset classes with European regulatory compliance and multi-asset support.

View jobs by Bitpanda

Skills

Candidate Availability

Required and preferred rules are kept separate and reflect the wording in the original posting.

About the Role

You will define the GRC roadmap, evolve control frameworks, and advise leaders on material risk decisions. You will lead complex audits and regulatory responses, own relevant security governance domains, establish reusable standards, mentor specialists, and embed controls into operational workflows.

Requirements

  • 7–10+ years of information security GRC, audit, assurance, security risk, compliance, software engineering, or financial services risk experience
  • Experience owning complex multi-stakeholder GRC programs
  • ISO 27001
  • DORA
  • SOC 2
  • NIST CSF
  • BaIT
  • COBIT
  • Cloud security
  • IAM
  • SDLC governance
  • Incident management
  • Vulnerability management
  • Logging and monitoring
  • Crypto and fintech operational processes

Responsibilities

  • Define and drive a multi-year GRC roadmap
  • Evolve the security control framework and governance principles
  • Advise leadership on risk acceptance, remediation priorities, control investments, and scope decisions
  • Lead major audits, assurance activities, and regulatory responses
  • Own one or more GRC domains, including ISMS, DORA, third-party risk, or control assurance
  • Set control, evidence, testing, and playbook standards
  • Mentor specialists and associates
  • Embed controls into workflows with Security Engineering, IT, and Compliance

Benefits

  • Hybrid working model
  • Up to 25 additional days per year to work from a city or country of your choice
  • Stock option plan participation
  • Confidential coaching, counselling, and mental health resources through OpenUP
  • 3 additional paid days off in 2027 after six months of employment
  • Partner discounts, rewards, and perks
  • Up to 8 additional weeks of gender-neutral new parent leave
  • Free onsite dining in Vienna, Bucharest, Barcelona, and Berlin
  • Recognition and rewards for tenure
  • Bitpanda-branded merchandise
  • Company events