Expert, Information Security

As an Information Security Expert at Bitpanda, you are a senior individual contributor who sets direction and solves complex GRC problems in a regulated fintech environment. You shape security governance strategy, ensure the control framework remains effective as the business scales, and act as a key advisor to security leadership and senior business stakeholders on risk and compliance decisions. You'll lead complex, high-impact initiatives across multiple entities and regions, influence across the organisation, and raise the bar for how we design, test, and evidence security controls.

What you'll do

• Define multi-year GRC roadmap aligned to business strategy, risk appetite, and regulatory expectations such as DORA readiness, audit strategy, and control maturity targets; drive control framework evolution by rationalizing controls, reducing duplication, and ensuring proportionality based on criticality, data sensitivity, and business impact; establish north star principles for governance including minimum control baselines, exception governance, and evidence-by-design
• Advise leadership on material risk decisions including risk acceptance, remediation prioritisation, control investments, and scope decisions; produce executive-grade outputs such as risk narratives, board and committee materials, and regulator and customer responses with defensible rationale; facilitate senior stakeholder alignment when priorities conflict
• Own strategy and approach for major audits and assurance activities including ISO 27001, SOC 2, regulatory examinations, and key client due diligence; lead responses to complex audit and regulatory issues including root-cause analysis, corrective action programs, and sustained effectiveness verification
• Serve as subject matter expert for one or more domains: ISMS and ISO 27001 at scale across multiple entities; DORA and operational resilience governance including control mapping and ICT risk integration; third-party risk for critical ICT providers including oversight model and ongoing monitoring; security control assurance including testing program design and control health metrics
• Set standards and reusable artifacts including control narratives, evidence templates, testing methodologies, and playbooks; mentor specialists and associates to raise organisation-wide capability; partner with Security Engineering, IT, and Compliance to embed controls into workflows

What you bring

• Typically 7-10+ years of experience in information security GRC, audit and assurance, security risk, compliance, software engineering, or financial services risk roles
• Demonstrated ownership of complex, multi-stakeholder GRC programs and successful navigation of audits and regulatory scrutiny
• Deep working knowledge of ISO 27001 and DORA, with strong familiarity of adjacent frameworks such as SOC 2, NIST CSF, BaIT, and COBIT, including how to test and evidence controls
• Strong technology risk understanding across cloud, IAM, SDLC governance, incident management, vulnerability management, logging and monitoring, and crypto and fintech operational processes as relevant
• Ability to influence across the organisation and resolve conflicts with a risk-based, outcome-oriented approach

What we offer

• Hybrid working model combining onsite collaboration and remote work, with an additional 25 days per year to work from a city or country of your choice
• Competitive total compensation package aligned with Bitpanda's pay-for-impact policy, including participation in the stock option plan
• Confidential coaching, counselling, and mental health resources through OpenUP
• 3 additional days of paid time off beyond standard annual leave to rest and recharge, available after 6 months with the company
• Unlimited access to Udemy's library of online courses
• Discounts, rewards, and perks from partners worldwide across lifestyle, wellness, tech, and travel
• Up to 8 additional weeks of gender-neutral new parent leave
• Free onsite dining in Vienna, Bucharest, Barcelona, and Berlin offices, including freshly prepared lunches and snacks
• Recognition and rewards for tenure milestones and achievements at Bitpanda
• Exclusive Bitpanda-branded merchandise and gear
• Company events including the Winter Party in Vienna and gatherings worldwide

About Bitpanda

Founded in 2014 in Vienna, Austria, Bitpanda is a trade-everything investment platform that simplifies wealth creation for more than 7 million customers across Europe. The platform empowers first-time investors and seasoned experts to invest in cryptocurrencies, crypto indices, stocks, precious metals, and commodities 24/7, making it one of Europe's safest and most secure platforms for modern investing. Bitpanda operates across multiple European offices with a global team working across different cultures and time zones.