Expert, Information Security

Bitpanda - Europa, 🇪🇺 Múltiples ciudades

Resumen - Senior individual contributor focused on GRC in a regulated fintech environment. - Shape security governance strategy and ensure control framework effectiveness. - Advise leadership on risk and compliance decisions. - Lead complex, multi-region, regulator-facing initiatives. Responsabilidades - Define multi-year GRC roadmap aligned with strategy and risk appetite. - Drive control framework evolution and establish governance principles. - Advise executives on risk acceptance, remediation, and control investments. - Lead major audits and assurance activities (ISO 27001, SOC 2, regulatory exams). - Act as SME in domains such as ISMS/ISO 27001, DORA, third-party risk, and control assurance. - Set standards, mentor team members, and collaborate with Security Engineering and Compliance. Requisitos - 7–10+ years of experience in information security GRC, audit, risk, compliance, or related roles. - Proven track record managing complex GRC programs and audits. - Deep knowledge of ISO 27001, DORA, SOC 2, NIST CSF, BaIT, COBIT. - Strong understanding of technology risks including cloud, IAM, SDLC governance. - Ability to influence and resolve conflicts organization-wide with a risk-based approach. Beneficios - Hybrid work model with 25 extra days to work remotely from any city or country. - Competitive compensation and participation in stock option plan. - Mental health support via confidential coaching and resources. - Additional paid time off for wellbeing. - Unlimited access to Udemy courses for continuous learning. - Discounts and perks across lifestyle, wellness, tech, and travel. - Up to 8 weeks gender-neutral new parent leave. - Free onsite dining for certain offices. - Recognition programs, exclusive merch, and company events.