Senior Associate, Information Security
Bitpanda, Vienna, Vienna, Austria +4
What you will do
- GRC domain execution: Manage daily operations of assigned GRC domains, track yearly plans, and build scalable playbooks to reduce audit friction and improve control consistency.
- Assurance & audits: Coordinate internal and external audits end-to-end (planning, evidence gathering, auditor Q&A, remediation). Translate regulatory requirements into actionable plans and draft formal audit responses.
- Risk management: Facilitate risk assessments for systems and products. Drive treatment plans with owners, escalate unacceptable residual risks, and prepare clear KRI/KPI reporting for leadership.
- Third-party risk management (if in scope): Drive vendor due diligence by evaluating security evidence and tracking remediation. Partner with Legal and Procurement to embed security obligations into contracts.
- Control testing & improvement: