Назад
Company hidden
9 дней назад

Specialist, Information Security (Fintech)

Формат работы
hybrid
Тип работы
fulltime
Грейд
middle
Английский
b2
Страна
Austria
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Specialist, Information Security (Fintech) (GRC/ISO 27001): Owning and maturing governance, risk, and compliance domains for a regulated fintech platform with an accent on audit readiness, control design, risk governance, and third-party risk. Focus on leading assessments, testing control effectiveness, translating regulatory requirements into implementation plans, and improving security reporting and automation.

Location: Vienna, Austria; hybrid working model with onsite collaboration and remote work. An additional 25 days per year may be used to work from a city or country of choice.

Company

hirify.global is a Vienna-headquartered fintech platform for investing in cryptocurrencies, crypto indices, stocks, precious metals, and commodities.

What you will do

  • Own one or more GRC domains, including ISO 27001/ISMS, control testing, third-party risk, risk governance, or business continuity management.
  • Build scalable processes, playbooks, annual plans, and measurable outcomes for security governance.
  • Coordinate internal and external audits from readiness planning through evidence management, auditor communication, and remediation verification.
  • Facilitate risk assessments, define treatment plans, escalate unacceptable residual risk, and improve leadership reporting through KRIs, KPIs, and risk themes.
  • Lead critical-vendor due diligence and embed security requirements into contracts and ongoing supplier oversight.
  • Design risk-based control testing, identify recurring failures, and introduce process improvements, automation, and dashboards.

Requirements

  • 4–7 years of experience in GRC, audit and assurance, security risk management, compliance, or information security.
  • Strong knowledge of ISO 27001 or comparable frameworks, including mapping requirements to controls, evidence, and operational processes.
  • Experience leading audits or assessments from planning through closure.
  • Security fundamentals across IAM, SDLC governance, incident management, vulnerability management, logging and monitoring, and third-party risk.
  • Excellent written communication skills for producing policy, control documentation, and audit-ready narratives independently.

Culture & Benefits

  • Hybrid work with onsite collaboration and remote flexibility.
  • Competitive total compensation with participation in a stock option plan.
  • Mental health coaching, counselling, and wellbeing resources through OpenUP.
  • Additional paid time off, learning access through Udemy, and partner discounts and rewards.
  • New parent leave of up to eight additional weeks and location-specific benefits.
  • Free onsite dining in Vienna, Bucharest, Barcelona, and Berlin, plus company events and recognition programs.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →