Security GRC Specialist (Fintech)

Location: Remote from Germany or Austria

Company

Financial-services software and platform provider delivering cloud-based solutions for banking and insurance processes.

What you will do

• Support engineering teams in maintaining effective security controls across cloud, SaaS, identity, infrastructure, and application environments.
• Perform security risk assessments, control reviews, gap analyses, and technical design assessments.
• Define practical remediation plans and track improvements with technical and non-technical stakeholders.
• Drive SOC 2, ISO 27001, and related assurance activities, including control design, evidence readiness, audit support, and continuous compliance.
• Review security clauses in contracts and RFPs, respond to security inquiries, and support customer due diligence and audits.

Requirements

• 5+ years of experience in information security, security compliance, risk management, audit, or a related discipline.
• Hands-on experience supporting SOC 2 programs, including control design, evidence collection, audit coordination, and remediation tracking.
• Strong knowledge of SOC 2, ISO 27001, and related security frameworks and control standards.
• Ability to assess security risks, evaluate control effectiveness, and communicate recommendations across technical and business teams.
• Experience collaborating with engineering, infrastructure, product, business, IAM, IT, and security operations teams.
• Fluent professional English is required.

Nice to have

• Professional working proficiency in German, ideally C1 or higher.

Culture & Benefits

• Flexible work setting within a diverse, globally connected organization.
• Startup-like agility combined with the expertise and market presence of an established organization.
• Opportunities for career development and advancement based on achievements.
• Competitive compensation packages.