Senior Specialist Information Security
Bitpanda helps users invest in stocks, cryptocurrencies, metals, and ETFs through a regulated European platform with fractional investing from €1.
Maintainer signals as of 9/25/2026
Funding history
Projects
About Bitpanda
Bitpanda helps European users invest in cryptocurrencies, stocks, ETFs, precious metals, and commodities through a regulated fintech platform. Users can trade fractional shares, access early-stage crypto projects, earn staking rewards, and spend investments via debit card. The platform combines diverse asset classes with European regulatory compliance and multi-asset support.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will lead and scale security governance in a regulated fintech environment. You will own cross-functional GRC domains, improve control effectiveness, guide risk decisions, lead audits and assurance activities, oversee critical supplier risk, and mentor security specialists while helping engineering and operations teams implement requirements consistently.
Requirements
- 6–10 years of experience in information security GRC, audit and assurance, risk management, compliance, or adjacent security roles
- Proven track record of leading audits or assessments and driving remediation across multiple teams and systems
- Working knowledge of ISO 27001 and DORA and/or SOC 2, PCI DSS, or NIST
- Ability to design controls, define evidence, and test effectiveness
- Understanding of technology risk across cloud, IAM, SDLC governance, incident management, vulnerability management, logging and monitoring, and third-party risk
- Excellent written and verbal communication skills
- Ability to produce executive-ready materials and auditor-facing narratives
Responsibilities
- Own and evolve GRC domains including ISMS operations, business continuity management, and risk governance
- Define strategy, annual plans, cadences, success metrics, and risk-aligned controls
- Facilitate and challenge risk assessments for products, architectural changes, and critical vendors
- Drive risk treatment by aligning owners, tracking commitments, and escalating residual risks
- Lead complex multi-entity and regulator-facing audits and assessments
- Design and run a risk-based control testing program
- Translate regulatory requirements into internal work programs and durable remediation
- Set due-diligence and monitoring requirements for critical suppliers
- Partner with Procurement and Legal on security contract requirements
- Mentor security specialists and set quality standards for documentation and stakeholder engagement
- Help engineering and operations teams implement requirements efficiently and consistently
Benefits
- Hybrid working model with onsite collaboration and remote work
- 25 additional days per year to work from a city or country of your choice
- Stock option plan
- Confidential coaching, counselling, and mental health resources through OpenUP
- 3 additional paid days off in 2027 after 6 months of employment
- Partner discounts, rewards, and perks across lifestyle, wellness, technology, and travel
- Up to 8 additional weeks of gender-neutral new parent leave
- Free onsite dining in Vienna, Bucharest, Barcelona, and Berlin
- Recognition and rewards for tenure
- Bitpanda-branded merchandise
- Company events