9 дней назад
Specialist, Information Security (Fintech)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Specialist, Information Security (Fintech) (GRC/ISO 27001): Owning and maturing governance, risk, and compliance domains for a regulated fintech platform with an accent on audit readiness, control design, risk governance, and third-party risk. Focus on leading assessments, testing control effectiveness, translating regulatory requirements into implementation plans, and improving security reporting and automation.
Location: Vienna, Austria; hybrid working model with onsite collaboration and remote work. An additional 25 days per year may be used to work from a city or country of choice.
Company
is a Vienna-headquartered fintech platform for investing in cryptocurrencies, crypto indices, stocks, precious metals, and commodities.
What you will do
- Own one or more GRC domains, including ISO 27001/ISMS, control testing, third-party risk, risk governance, or business continuity management.
- Build scalable processes, playbooks, annual plans, and measurable outcomes for security governance.
- Coordinate internal and external audits from readiness planning through evidence management, auditor communication, and remediation verification.
- Facilitate risk assessments, define treatment plans, escalate unacceptable residual risk, and improve leadership reporting through KRIs, KPIs, and risk themes.
- Lead critical-vendor due diligence and embed security requirements into contracts and ongoing supplier oversight.
- Design risk-based control testing, identify recurring failures, and introduce process improvements, automation, and dashboards.
Requirements
- 4–7 years of experience in GRC, audit and assurance, security risk management, compliance, or information security.
- Strong knowledge of ISO 27001 or comparable frameworks, including mapping requirements to controls, evidence, and operational processes.
- Experience leading audits or assessments from planning through closure.
- Security fundamentals across IAM, SDLC governance, incident management, vulnerability management, logging and monitoring, and third-party risk.
- Excellent written communication skills for producing policy, control documentation, and audit-ready narratives independently.
Culture & Benefits
- Hybrid work with onsite collaboration and remote flexibility.
- Competitive total compensation with participation in a stock option plan.
- Mental health coaching, counselling, and wellbeing resources through OpenUP.
- Additional paid time off, learning access through Udemy, and partner discounts and rewards.
- New parent leave of up to eight additional weeks and location-specific benefits.
- Free onsite dining in Vienna, Bucharest, Barcelona, and Berlin, plus company events and recognition programs.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →
Похожие вакансии
10 дней назад
Principal IT Security Transformation & Compliance Lead (AI)
13 дней назад
Cyber Threat Intelligence Analyst (Cybersecurity)
3 500 - 6 200€
13 дней назад
SIEM Administrator / Engineer (Cybersecurity)
3 500 - 6 200€
13 дней назад
Vulnerability Management Consultant (Cybersecurity)
3 500 - 6 500€
10 дней назад
Head of Technical Partner Management (Cybersecurity)
10 дней назад
Software Engineer (AI/LLM)
100 000 - 350 000$