Dein persönlicher KI-Karriere-Agent
Defining multi-year GRC roadmaps and evolving control frameworks for a 7M+ customer investment platform. 7-10+ years of information security GRC or financial services risk experience required. Hybrid work, 25 days work from choice of city/country, stock option plan.
Deine Match-Analyse
Warum dieser Job zu dir passt
Mögliche Lücken
Tipps für deine Bewerbung
Anforderungen
- 7-10+ years information security GRC, audit/assurance, security risk, compliance, software engineering, or financial services risk experience
- Ownership of complex, multi-stakeholder GRC programs
- Successful navigation of audits/regulatory scrutiny
- Deep working knowledge of ISO 27001
- Deep working knowledge of DORA
- Strong familiarity with ISO 27001, DORA, SOC 2, NIST CSF, BaIT, COBIT frameworks
- Ability to test and evidence controls
- Strong technology risk understanding (cloud, IAM, SDLC governance, incident management, vulnerability management, logging/monitoring, crypto/fintech operational processes)
- Ability to influence across the organisation
- Ability to resolve conflicts with risk-based, outcome-oriented approach
Aufgaben
- Define multi-year GRC roadmap aligned to business strategy
- Drive control framework evolution and rationalize controls
- Establish principles for governance, including minimum control baselines
- Advise leadership on material risk decisions
- Produce executive-grade outputs, including risk narratives
- Facilitate senior stakeholder alignment on conflicting priorities
- Own strategy and approach for major audits and assurance activities
- Lead responses to complex audit and regulatory issues
- Serve as SME for ISMS/ISO 27001 at scale
- Serve as SME for DORA / operational resilience governance
- Serve as SME for third-party risk for critical ICT providers
- Serve as SME for security control assurance
- Set standards and reusable artifacts for controls
- Mentor specialists and associates
- Partner with Security Engineering/IT/Compliance to embed controls
Berufserfahrung
Ausbildung
Sprachen
Tools & Technologien
Benefits
- Hybrid working model
- 25 days work from choice of city/country
- Stock option plan
- Confidential coaching and counselling
- Mental health resources
- 3 additional paid days off
- Unlimited Udemy access
- Partner discounts and rewards
- 8 weeks new parent leave
- Free onsite dining
- Onsite snacks
- Tenure recognition and rewards
- Bitpanda-branded merchandise
- Company events
Von Nejo automatisch aufbereitet
Nejo hat diesen Job automatisch von der Website des Unternehmens Bitpanda erfasst und die Informationen auf Nejo mit Hilfe von KI für dich aufbereitet. Trotz sorgfältiger Analyse können einzelne Informationen unvollständig oder ungenau sein. Bitte prüfe immer alle Angaben in der Originalanzeige! Inhalte und Urheberrechte der Originalanzeige liegen beim ausschreibenden Unternehmen.
Zur Originalanzeige bei BitpandaÜber das Unternehmen
The company simplifies wealth creation through a user-friendly platform for investing in cryptocurrencies, stocks, and commodities.
Nejo bewertet ihn, und bringt ihn danach gemeinsam mit dir in Bestform.
Noch nicht perfekt?
- BitpandaSenior Specialist, Information Security (m/w/x)Vollzeitmit HomeofficeSeniorWien, Berlin
- BitpandaSpecialist, Information Security (m/w/x)Vollzeitmit HomeofficeBerufserfahrenWien
- fiskalyInformation Security & Compliance Manager (m/w/x)Vollzeitmit HomeofficeSeniorWien
- BitpandaLead Legal Counsel, Group DPO (m/w/x)Vollzeitmit HomeofficeSeniorBerlin, Wien
- BitpandaLead Legal Counsel, Group DPO (m/w/x)Vollzeitmit HomeofficeSeniorWien