Expert, Information Security
Bitpanda, Barcelona, Spain +7
What you will do
- GRC strategy & roadmap: Define multi-year GRC roadmap aligned to business strategy, risk appetite, and regulatory expectations (e.g., DORA readiness, audit strategy, control maturity targets). Drive control framework evolution: rationalize controls, reduce duplication, and ensure proportionality based on criticality, data sensitivity, and business impact. Establish “north star” principles for governance (e.g., minimum control baselines, exception governance, evidence-by-design).
- Executive advisory & decision support: Advise leadership on material risk decisions: risk acceptance, remediation prioritisation, control investments, and scope decisions. Produce executive-grade outputs: risk narratives, board/committee materials, and regulator/customer responses with defensible rationale. Facilitate senior stakeholder alignment when priorities conflict (delivery speed vs control rigor; cost vs assurance depth).
- Regulatory, audit & assurance leadership (complex scope):