Назад
Company hidden
18 дней назад

Senior Specialist, Information Security (Fintech)

Формат работы
hybrid
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
Austria
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Senior Specialist, Information Security (Fintech): Leading and scaling information security governance across ISMS, regulatory readiness, technology risk, audits, and critical third-party oversight with an accent on ISO 27001, DORA, control effectiveness, and risk-based assurance. Focus on designing GRC operating models, challenging high-impact risk assessments, driving remediation, and advising senior stakeholders in a regulated fintech environment.

Location: Vienna, Austria; hybrid working model with onsite collaboration and remote work. An additional 25 days per year may be worked from a city or country of choice.

Company

hirify.global operates a digital investment platform for cryptocurrencies, crypto indices, stocks, precious metals, and commodities across Europe.

What you will do

  • Own and evolve GRC domains such as ISMS operations, business continuity management, and risk governance.
  • Lead high-impact risk assessments for new products, architectural changes, and critical vendors.
  • Manage complex audits and assessments, including regulatory readiness, walkthroughs, remediation, and continuous control testing.
  • Oversee third-party risk and security requirements for critical cloud, payments, identity, and SaaS suppliers.
  • Mentor security specialists and translate GRC requirements for engineering and operations teams.

Requirements

  • 6–10 years of experience in information security GRC, audit and assurance, risk management, compliance, or related security roles.
  • Experience leading audits or assessments and driving remediation across multiple teams and systems.
  • Strong knowledge of ISO 27001 and DORA; experience with SOC 2, PCI DSS, or NIST is also relevant.
  • Understanding of technology risk across cloud, IAM, SDLC governance, incident management, vulnerability management, logging and monitoring, and third-party risk.
  • Strong written and verbal communication skills, including executive-ready materials and auditor-facing narratives.

Culture & Benefits

  • Hybrid work combining onsite collaboration and remote work.
  • Competitive total compensation with participation in a stock option plan.
  • Mental health coaching, counselling, and wellbeing resources through OpenUP.
  • Annual leave, additional paid time off in 2027 after six months, and up to eight weeks of gender-neutral new parent leave.
  • Unlimited access to Udemy courses, partner discounts, company events, and onsite dining in Vienna and selected other offices.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →