Expert, Information Security (Fintech)

Location: Vienna, Austria; hybrid work combining onsite collaboration and remote work. An additional 25 days per year may be worked from a city or country of choice.

Company

hirify.global operates a digital investment platform offering cryptocurrencies, crypto indices, stocks, precious metals, and commodities to more than 7 million customers across Europe.

What you will do

• Define the multi-year GRC roadmap in line with business strategy, risk appetite, and regulatory expectations, including DORA readiness, audit strategy, and control maturity targets.
• Shape the security control framework by rationalizing controls, reducing duplication, and establishing minimum baselines, exception governance, and evidence-by-design principles.
• Advise leadership and senior stakeholders on material risk decisions, remediation priorities, control investments, and scope decisions; prepare risk narratives, board materials, and regulator or customer responses.
• Lead major audits and assurance activities covering ISO 27001, SOC 2, regulatory examinations, and key client due diligence, including complex issue remediation and effectiveness verification.
• Own or support SME domains including ISMS, DORA and operational resilience, critical ICT third-party risk, and security control assurance.
• Set reusable standards, testing methodologies, evidence templates, and playbooks; mentor specialists and associates and partner with Security Engineering, IT, and Compliance to embed controls into workflows.

Requirements

• Typically 7–10+ years of experience in information security GRC, audit or assurance, security risk, compliance, software engineering, and/or financial services risk roles.
• Demonstrated ownership of complex, multi-stakeholder GRC programs and successful navigation of audits or regulatory scrutiny.
• Deep working knowledge of ISO 27001 and DORA, plus strong familiarity with SOC 2, NIST CSF, BaIT, and COBIT, including control testing and evidence.
• Strong technology risk understanding across cloud, IAM, SDLC governance, incident management, vulnerability management, logging and monitoring, and crypto or fintech operational processes where relevant.
• Ability to influence across the organisation and resolve conflicts using a risk-based, outcome-oriented approach.

Culture & Benefits

• Hybrid working model with onsite collaboration and remote work, plus 25 additional work-from-anywhere days per year.
• Competitive total compensation with participation in a stock option plan.
• Confidential coaching, counselling, and mental health resources through OpenUP.
• Annual leave plus 3 additional paid days off in 2027 after six months of employment, unlimited Udemy access, partner discounts, and up to 8 additional weeks of gender-neutral new parent leave.
• Location-specific benefits include onsite dining in Vienna, Bucharest, Barcelona, and Berlin, recognition rewards, merchandise, and company events.
• Fair and inclusive workplace based on trust, mutual respect, and diverse perspectives.