Bitpanda
Lead, Information Security (m/w/x)
Vollzeitmit HomeofficeSenior
Wien, Berlin
Neuer Job?Nejo!
Dein persönlicher KI-Karriere-Agent
Nejo KI-Zusammenfassung
Developing and maintaining security policy framework and cyber risk management for a global travel platform. 5+ years in security GRC, compliance, or IT audit required. Hybrid work, 30 days work-from-anywhere, annual growth budget.
Deine Match-Analyse
von deinem Karriere-Agenten
Warum dieser Job zu dir passt
Mögliche Lücken
Tipps für deine Bewerbung
Anforderungen
- 5+ years in security GRC, compliance, or IT audit
- Hands-on experience with ISO 27001, PCI DSS, SOX ITGC, SOC 2, or NIS2
- Track record of writing approved policies and standards
- Experience designing or running risk methodology and register
- Technical depth in cloud (AWS), SaaS, identity and access, software delivery
- Experience with GRC platform (Vanta, Drata, or similar)
- Instinct to automate repeat work, including with AI tools
- Clear, concise writing in English
- Ability to explain risk in business terms to leadership
- CISA, CISM, CRISC, CISSP, or ISO 27001 certification
- Experience with NIS2 or German BSI framework
- German language skills
- Experience in regulated environment or scale-up
- Familiarity with Three Lines model
- Experience working with Internal Audit and enterprise risk teams
Aufgaben
- Own the security policy framework
- Write, maintain, and approve security policies and standards
- Keep the policy register current
- Run cyber risk management
- Maintain the cyber risk register
- Facilitate risk assessments with system and business owners
- Track risk treatment plans to closure
- Report top risks to leadership
- Run security compliance programs
- Coordinate PCI DSS, SOX, ITGC, and NIS2 activities
- Manage ISO 27001 readiness
- Act as the main Security contact for external auditors and assessors
- Build continuous evidence
- Map one control framework across regulations in the GRC platform
- Automate evidence collection with Engineering and IT
- Manage regulatory obligations with Legal
- Turn regulatory requirements into concrete controls
- Support incident reporting procedures
- Support management accountability, including training and approval cycles
- Review third parties for security
- Run the security step during vendor intake and reassessment
- Define control KPIs
- Track maturity against the NIST CSF
- Conduct internal reviews to close the loop
Berufserfahrung
5 Jahre
Ausbildung
Bachelor-AbschlussODER
Master-Abschluss
Sprachen
Englisch – fließend
Deutsch – Grundkenntnisse
Tools & Technologien
AWSVantaDrataAI tools
Benefits
Flexibles Arbeiten
- Hybrid working approach
Sonstige Zulagen
- Annual personal growth budget
Mentoring & Coaching
- Mentorship programs
Workation & Sabbatical
- Work from anywhere for 30 days
Team Events & Ausflüge
- Quarterly team event budget
Moderne Technikausstattung
- Access to leading AI tools
Öffi Tickets
- Monthly transportation budget
Gesundheits- & Fitnessangebote
- Monthly fitness budget
- Health and wellness benefits
Mitarbeiterrabatte
- Discounts on activities
Weiterbildungsangebote
- Language reimbursement program
Von Nejo automatisch aufbereitet
Nejo hat diesen Job automatisch von der Website des Unternehmens GetYourGuide erfasst und die Informationen auf Nejo mit Hilfe von KI für dich aufbereitet. Trotz sorgfältiger Analyse können einzelne Informationen unvollständig oder ungenau sein. Bitte prüfe immer alle Angaben in der Originalanzeige! Inhalte und Urheberrechte der Originalanzeige liegen beim ausschreibenden Unternehmen.
Zur Originalanzeige bei GetYourGuideÜber das Unternehmen
GE
TourismBerlin
GetYourGuide is the globally leading marketplace for unforgettable travel experiences, helping travelers discover the best things to do.
getyourguide.comWie gut ist dein Lebenslauf?
Nejo bewertet ihn, und bringt ihn danach gemeinsam mit dir in Bestform.
Du hast noch keinen Lebenslauf?
Noch nicht perfekt?
- N26ICT GRC – Risk & Compliance Manager (m/w/x)Vollzeitmit HomeofficeSeniorBerlin
- GetYourGuideSenior Internal Audit Manager (m/w/x)Vollzeitmit HomeofficeSeniorBerlin
- KAYAKSecurity Engineer (m/w/x)Vollzeitmit HomeofficeBerufserfahrenBerlin
- N26Information Security Controls Manager - Cloud & AI Governance (m/w/x)Vollzeitmit HomeofficeManagementBerlin