risk managementinformation securitygrciso 27001auditthird party riskdoratechnology risk
Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
ЗП не указана
На похожих ролях по рынку
$65к$84кмедиана$103к
50 в выборке
На СНГ рынке: $5.1к/мес ($3.2к - $7.9к)
86
Хорошая вакансия
развернуть
Зона ответственности на senior-уровне подробно описана, но без указанной зарплаты сложно оценить финансовую сторону предложения.
Кликните для подробной информации
Зарплата не указанаЧёткая зона ответственностиФинтех и регулированиеГибкость работыХорошие льготы
Оценка от Hirify AI
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Senior Specialist, Information Security (Fintech): Leading and scaling information security governance across ISMS, regulatory readiness, technology risk, audits, and critical third-party oversight with an accent on ISO 27001, DORA, control effectiveness, and risk-based assurance. Focus on designing GRC operating models, challenging high-impact risk assessments, driving remediation, and advising senior stakeholders in a regulated fintech environment.
Location: Vienna, Austria; hybrid working model with onsite collaboration and remote work. An additional 25 days per year may be worked from a city or country of choice.
Company
hirify.global operates a digital investment platform for cryptocurrencies, crypto indices, stocks, precious metals, and commodities across Europe.
What you will do
Own and evolve GRC domains such as ISMS operations, business continuity management, and risk governance.
Lead high-impact risk assessments for new products, architectural changes, and critical vendors.
Manage complex audits and assessments, including regulatory readiness, walkthroughs, remediation, and continuous control testing.
Oversee third-party risk and security requirements for critical cloud, payments, identity, and SaaS suppliers.
Mentor security specialists and translate GRC requirements for engineering and operations teams.
Requirements
6–10 years of experience in information security GRC, audit and assurance, risk management, compliance, or related security roles.
Experience leading audits or assessments and driving remediation across multiple teams and systems.
Strong knowledge of ISO 27001 and DORA; experience with SOC 2, PCI DSS, or NIST is also relevant.
Understanding of technology risk across cloud, IAM, SDLC governance, incident management, vulnerability management, logging and monitoring, and third-party risk.
Strong written and verbal communication skills, including executive-ready materials and auditor-facing narratives.
Culture & Benefits
Hybrid work combining onsite collaboration and remote work.
Competitive total compensation with participation in a stock option plan.
Mental health coaching, counselling, and wellbeing resources through OpenUP.
Annual leave, additional paid time off in 2027 after six months, and up to eight weeks of gender-neutral new parent leave.
Unlimited access to Udemy courses, partner discounts, company events, and onsite dining in Vienna and selected other offices.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →