Senior Specialist, Information Security

Bitpanda, the Vienna-founded investment platform serving more than 7 million customers across Europe, is hiring a Senior Specialist in Information Security. The role leads major parts of the company's security governance (GRC) in a regulated fintech environment, owning complex cross-functional domains and advising senior stakeholders.

Responsibilities

• Own and evolve one or more GRC domains end-to-end, such as ISMS operations, business continuity and risk governance.
• Lead high-impact risk assessments and drive risk treatment, escalating residual risk above appetite.
• Lead complex, regulator-facing audits and design a risk-based control testing program.
• Set due diligence and monitoring requirements for critical suppliers, working with Procurement and Legal.
• Mentor junior staff and act as a translator between GRC requirements and engineering and operations teams.

What we are looking for

• Typically 6-10 years of experience in information security GRC, audit, risk, compliance or related roles.
• A proven record of leading audits and driving remediation across teams.
• Working knowledge of ISO 27001 and DORA (and/or SOC 2, PCI DSS or NIST).
• Understanding of technology risk across cloud, identity and access, SDLC, incident and vulnerability management, logging and third-party risk.
• Strong written and verbal communication, including executive-level materials.

Additional Information

Hybrid model: three days onsite and two days from home in Vienna. Compensation is described as competitive total compensation under a pay-for-impact policy, with a stock option plan.

Perks and Benefits

• 25 additional days per year to work from another city or country.
• Stock option plan and pay-for-impact compensation.
• Confidential mental health support and coaching.
• Extra paid time off (3 days in 2027 after six months of tenure).
• Unlimited access to Udemy courses.
• Up to 8 additional weeks of gender-neutral new parent leave.
• Free onsite meals at certain locations, partner discounts, and company events.