Senior Associate Inmation Security

As an Information Security Senior Associate at Bitpanda, you will drive key parts of our governance, risk, and compliance (GRC) program in a regulated fintech environment. You’ll own recurring GRC processes end‑to‑end, partner with control owners across the business, and help keep us continuously audit‑ready.

• Governance & control framework ownership: Own and maintain parts of the ISMS; ensure policies/standards are implemented in a measurable way; support security‑by‑design governance for new initiatives.
• Assurance & audit execution: Plan and run audit readiness activities (ISO 27001/SOC 2/internal audit/regulatory requests), manage evidence plans, stakeholder coordination, review evidence quality, challenge gaps, drive remediation, draft responses, and verify closure.
• Risk management: Facilitate risk assessments for systems/projects/vendors, document outcomes and treatment plans, maintain risk register quality, identify systemic themes and propose improvements.
• Third‑party risk & compliance enablement: Lead due diligence reviews, track remediation commitments, support security contractual requirements, partner with Procurement/Legal/Business owners to ensure proportionate security requirements for vendors.
• Control testing & continuous improvement: Execute control design/operating effectiveness testing, document results, recommend improvements, produce GRC reporting and metrics, improve workflows through templates, playbooks, automation, and tooling.

• Proactive, ownership‑driven, you spot gaps and fix them without waiting for instructions.
• Balance rigor with pragmatism, applying proportionate controls to risk and business criticality.
• Write clearly and persuasively, especially when documenting controls, risks, and audit responses.
• Comfortable challenging constructively, asking “show me” and improving evidence and control quality without being obstructive.
• Collaborative and calm under deadline pressure (audits, regulator requests, escalations).

• Hybrid working model: onsite collaboration plus remote work with 25 additional days per year to work from a city or country of your choice.
• Competitive total compensation package aligned with Bitpanda’s pay‑for‑impact policy, including participation in our stock‑option plan.
• Mental wellbeing support: confidential coaching, counselling, and mental health resources through OpenUP.
• Extra time off: 3 additional days in 2026 to prioritize wellbeing.
• Continuous learning: unlimited access to Udemy’s library of online courses at your own pace.
• Exclusive perks and rewards: discounts, rewards, and perks from partners worldwide.
• Location‑specific benefits designed to make life at Bitpanda rewarding wherever you are.

Bitpanda is committed to fostering a fair and equal environment based on trust and mutual respect. We believe that a diverse and inclusive workplace is paramount to our success and we are committed to building a team that represents a wide variety of backgrounds, perspectives, and skills.