Dein persönlicher KI-Karriere-Agent
Specialist, Information Security (m/w/x)
Maturing governance, risk, and compliance programs for a fintech platform, focusing on ISO 27001 control mapping. 4-7 years of GRC or information security experience required. 25 days work from choice of city/country, stock options.
Deine Match-Analyse
Warum dieser Job zu dir passt
Mögliche Lücken
Tipps für deine Bewerbung
Anforderungen
- 4-7 years GRC, audit/assurance, security risk management, compliance, or information security experience
- Strong ISO 27001 (or comparable frameworks) knowledge
- Ability to map ISO 27001 requirements to controls, evidence, and processes
- Experience leading audits/assessments (planning through closure)
- Security fundamentals across IAM, SDLC governance, incident management, vulnerability management, logging/monitoring, and third-party risk
- Excellent written communication for policy/control documentation
- Ability to produce audit-ready narratives with minimal supervision
Aufgaben
- Own and mature significant parts of the governance, risk, and compliance program
- Serve as the go-to person for one or more GRC domains
- Drive GRC outcomes end-to-end: control design, operationalization, testing, metrics, and continuous improvement
- Own GRC domains including yearly plans, cadence, and measurable outcomes
- Build scalable processes and playbooks to reduce audit friction
- Improve control consistency across teams and entities
- Coordinate internal and external audits end-to-end
- Translate new regulatory and customer requirements into control impacts
- Provide implementation guidance and tracked delivery plans
- Draft and quality-review formal materials: audit responses, management action plans, risk acceptances, and control descriptions
- Facilitate and challenge risk assessments for systems, products, and material changes
- Ensure consistent scoring and clear treatment decisions for risks
- Drive risk treatment plans with accountable owners
- Escalate unacceptable timelines or residual risk
- Improve risk reporting for leadership, including themes, systemic issues, KRIs/KPIs, and prioritization
- Lead due diligence for critical vendors, defining security requirements and reviewing evidence
- Track vendor remediation
- Partner with Legal/Procurement to embed security requirements into contracts
- Ensure ongoing oversight of vendors, including renewals and periodic reviews
- Design and run a risk-based control testing plan
- Identify recurring control failures and drive cross-functional improvements
- Introduce automation and dashboards for evidence collection, control health reporting, and risk/audit tracking
Berufserfahrung
Ausbildung
Sprachen
Benefits
- Hybrid working model
- 25 days work from choice of city/country
- Stock option plan
- Confidential coaching and counselling
- Mental health resources
- 3 additional paid days off
- Unlimited Udemy access
- Partner discounts and rewards
- 8 weeks new parent leave
- Free onsite dining
- Tenure recognition and rewards
- Bitpanda-branded merchandise
- Company events
Von Nejo automatisch aufbereitet
Nejo hat diesen Job automatisch von der Website des Unternehmens Bitpanda erfasst und die Informationen auf Nejo mit Hilfe von KI für dich aufbereitet. Trotz sorgfältiger Analyse können einzelne Informationen unvollständig oder ungenau sein. Bitte prüfe immer alle Angaben in der Originalanzeige! Inhalte und Urheberrechte der Originalanzeige liegen beim ausschreibenden Unternehmen.
Zur Originalanzeige bei BitpandaÜber das Unternehmen
The company simplifies wealth creation through a user-friendly platform for investing in cryptocurrencies, stocks, and commodities.
Nejo bewertet ihn, und bringt ihn danach gemeinsam mit dir in Bestform.
Noch nicht perfekt?
- BitpandaSenior Specialist, Information Security (m/w/x)Vollzeitmit HomeofficeSeniorWien, Berlin
- BitpandaLead, Information Security (m/w/x)Vollzeitmit HomeofficeSeniorWien, Berlin
- BitpandaSpecialist, Risk & Controls Assurance (m/w/x)Vollzeitmit HomeofficeBerufserfahrenWien
- fiskalyInformation Security & Compliance Manager (m/w/x)Vollzeitmit HomeofficeSeniorWien
- Bundesimmobiliengesellschaft m.b.H.Informationssicherheits- & Compliance Expert:in (m/w/x)Vollzeitmit HomeofficeBerufserfahrenWienab 63.000 / Jahr