Specialist, Information Security

📋 Description

• Own and mature significant parts of governance, risk, and compliance (GRC) program in a regulated
• Own one or more GRC domains (e.g., ISMS and ISO 27001, audit & assurance, third-party risk
• Coordinate internal and external audits end-to-end (readiness planning, walkthroughs, evidence
• Translate new regulatory and customer requirements into control impacts, implementation guidance
• Facilitate and challenge risk assessments for systems, products, and material changes
• Drive risk treatment plans with accountable owners

🎯 Requirements

• Typically 4-7 years of experience in GRC, audit/assurance, security risk management, compliance, or
• Strong working knowledge of ISO 27001 (or comparable frameworks) and ability to map requirements to
• Experience leading audits/assessments or significant parts of them (planning through closure)
• Security fundamentals across IAM, SDLC governance, incident management, vulnerability management
• Excellent written communication: can produce policy/control documentation and audit-ready

🎁 Benefits

• Flexibility to work where you thrive – Hybrid working model, combining onsite collaboration and
• Reward for your impact – Competitive total compensation package aligned with Bitpanda’s
• Support for your mental wellbeing – Access confidential coaching, counselling, and mental health
• Time to recharge – On top of your standard annual leave, 3 additional days of paid time off in 2027
• Continuous learning and growth – Unlimited access to Udemy’s library of online courses
• Exclusive perks and rewards – Discounts, rewards, and perks from partners worldwide across