Information Security Specialist

About the role

As an Information Security Specialist you will own and mature key parts of Bitpanda’s governance, risk and compliance (GRC) program in a regulated fintech environment. You will act as the go‑to expert for one or more GRC domains, driving control design, operationalisation, testing and continuous improvement.

Key responsibilities

• Own GRC domains such as ISO 27001/ISMS, control testing, third‑party risk management and business continuity, defining yearly plans and measurable outcomes.
• Coordinate internal and external audits end‑to‑end, preparing evidence, handling auditor Q&A and verifying remediation.
• Translate new regulatory and customer requirements into concrete controls and tracked delivery plans.
• Facilitate risk assessments, drive risk treatment plans and improve risk reporting for leadership.
• Lead due‑diligence for critical vendors, embed security requirements into contracts and oversee ongoing oversight.
• Design and run risk‑based control testing, identify recurring failures and implement cross‑functional improvements, including automation and dashboards.

Required profile

• 4‑7 years of experience in GRC, audit/assurance, security risk management, compliance or information security.
• Strong knowledge of ISO 27001 (or comparable frameworks) and ability to map requirements to controls and evidence.
• Proven experience leading audits or assessments from planning through closure.
• Solid understanding of security fundamentals across IAM, SDLC governance, incident management, vulnerability management, logging/monitoring and third‑party risk.
• Excellent written communication skills for policy, control documentation and audit‑ready narratives.

Required skills

• ISO 27001 framework
• Identity and Access Management (IAM)
• Software Development Life Cycle (SDLC) governance
• Incident management
• Vulnerability management
• Logging and monitoring
• Third‑party risk management

What we offer

• Hybrid working model with flexibility to work remotely or onsite.
• Competitive total compensation, stock option plan and performance‑based pay.
• 25 days per year to work from any city or country of your choice.
• Mental wellbeing support through confidential coaching and counselling.
• Additional paid time off after six months of employment.
• Unlimited access to Udemy online courses for continuous learning.
• Various discounts, rewards and perks worldwide.
• Generous parental leave and gender‑neutral new‑parent benefits.
• Free onsite dining in Vienna, Bucharest, Barcelona and Berlin.
• Company events, recognition programs and Bitpanda‑branded merchandise.