Senior Associate, Information Security
Bitpanda helps users invest in stocks, cryptocurrencies, metals, and ETFs through a regulated European platform with fractional investing from €1.
Funding history
Projects
About Bitpanda
Bitpanda helps European users invest in cryptocurrencies, stocks, ETFs, precious metals, and commodities through a regulated fintech platform. Users can trade fractional shares, access early-stage crypto projects, earn staking rewards, and spend investments via debit card. The platform combines diverse asset classes with European regulatory compliance and multi-asset support.
Skills
Candidate Availability
About the Role
You will execute and mature key parts of the GRC program, taking charge of specific domains such as ISMS/ISO 27001, audit, risk management and TPRM. You will coordinate audits, facilitate risk assessments, drive vendor due diligence and test and improve controls with strong autonomy.
Requirements
- 2–4 years of experience in GRC, audit, security risk management or compliance
- Strong knowledge of ISO 27001 or similar frameworks
- Hands-on experience coordinating audits or risk assessments from planning through closure
- Solid grasp of security fundamentals (IAM, SDLC, incident and vulnerability management, logging/monitoring, third-party risk)
- Excellent communication skills, including policy documentation and audit narratives
Responsibilities
- Manage daily operations of assigned GRC domains, track yearly plans and build scalable playbooks
- Coordinate internal and external audits end-to-end and draft formal audit responses
- Facilitate risk assessments, drive treatment plans and prepare KRI/KPI reporting for leadership
- Drive vendor due diligence and partner with Legal and Procurement on contract security obligations (if in scope)
- Execute risk-based control testing and implement dashboards for evidence collection
Benefits
- Hybrid working model with an additional 25 days per year to work from a city or country of your choice
- Stock option plan participation
- Confidential coaching, counselling and mental health resources via OpenUP
- 3 additional days of paid time off in 2027 after 6 months
- Unlimited access to Udemy online courses
- Discounts, rewards and perks from partners worldwide
- Up to 8 additional weeks of gender-neutral new parent leave
- Free onsite dining in Vienna, Bucharest, Barcelona and Berlin
- Tenure recognition and rewards
- Bitpanda-branded merchandise
- Company events
