Bitpanda
Finance / FinServ
JuniorInformationSecurityAssociate
Neural analysis suggests this role is
optimal for Entry candidates.
“Junior Information Security Associate at Bitpanda. Skills: Governance, Risk, and Compliance (GRC), Control testing, Risk management. Drive key parts of the governance, risk, and compliance (GRC) program. Own recurring GRC processes end-to-end (e.g., evidence cycles, control testing, risk workflows)”
What You'll Achieve.
Keep the company continuously audit-ready; Reduce residual risk
Industry & Context.
Translate requirements into practical controls; Challenge gaps and drive remediation; Identify systemic themes and propose improvements; Recommend improvements to control testing
What They're Looking For.
Must Have
Hands-on, independent, and able to translate requirements into practical controls, Proactive and ownership-driven, Ability to balance rigor with pragmatism, Ability to apply controls proportionate to risk and business criticality, Comfortable challenging asking “show me” and improving evidence and control quality without being obstructive, Collaborative and calm under deadline pressure
Nice to Have
Experience with GRC tools
What You'll Do.
Drive key parts of the governance
and compliance (GRC) program
Own recurring GRC processes end-to-end (e.g.
Partner with control owners across the business
Help keep the company continuously audit-ready
Ensure policies/standards are implemented in a measurable way
Support security-by-design governance for new initiatives
Review evidence for quality (period coverage
Challenge gaps and drive remediation with control owners
consistent responses to auditors and internal stakeholders
Maintain an action plan and verify closure
Facilitate risk assessments for systems/projects/vendors
Document outcomes and treatment plans for risk assessments
Maintain the risk register
Identify systemic themes (repeat findings
control weakness patterns) and propose improvements
Partner with Procurement/Legal/Business owners to ensure proportionate security requirements for vendors
Document control testing results and recommend improvements
Produce GRC reporting and metrics for leadership
Improve GRC workflows through templates
How You'll Work.
Team & Collaboration
Partner with control owners across the business; Partner with Procurement/Legal/Business owners for third-party risk; Collaborate with teams and stakeholders
Communication Scope
Write clearly and persuasively; Draft clear, consistent responses to auditors and internal stakeholders
Process & Methodology
Maintain an action plan and verify closure, Manage risk assessment workflows
Full Job Description
Who we are We simplify wealth creation. Founded in 2014 in Vienna, Austria by Eric Demuth, Paul Klanschek and Christian Trummer, we’re here to help people trust themselves enough to build their financial freedom — for now and the future. Our user-friendly, trade-everything platform empowers both first-time investors and seasoned experts to invest in the cryptocurrencies, crypto indices, stocks*, precious metals and commodities* they want — with any sized budget, 24/7. Our global team works across different cultures and time zones, bringing our products to more than 6 million customers, making us one of Europe’s safest and most secure platforms that powers modern investing. Headquartered in Austria but operating across Europe, our products are built by fast-moving, talented, “roll-up-your-sleeves-and-make-it-happen” kind of people. It’s these diverse perspectives and innovative minds operating as ONE TEAM that keep Bitpanda at the cutting edge of our industry. So if you’re someone who thinks big, moves fast and wants to make an impact right from day one, then get ready to join our industry-changing team. Let’s go! Your mission As our Junior Information Security Associate, you will drive key parts of our governance, risk, and compliance (GRC) program in a regulated fintech environment. You’ll own recurring GRC processes end-to-end (such as evidence cycles, control testing, risk workflows), partner with control owners across the business, and help keep us continuously audit-ready. You’re hands-on, independent, and able to translate requirements into practical controls, while knowing when to escalate and when to simplify. What you’ll do Governance ensure policies/standards are implemented in a measurable way; support security-by-design governance for new initiatives. Assurance review evidence for quality (period coverage, completeness, traceability), challenge gaps, and drive remediation with control owners; draft clear, consistent responses to auditors and internal sta
Applying for this Junior Information Security Associate role?
Most applicants get filtered before a human reads their resume. See if yours makes the cut.
How to Apply on Greenhouse
- Create a Greenhouse profile before applying — it saves time across multiple applications.
- Upload your resume as a PDF; the parser handles it better than Word.
- Answer all knockout questions carefully — wrong answers auto-reject before a human sees you.
- Enable email notifications to track application status in real time.
ANONYMOUS · UNFILTERED
What do employees actually say about Bitpanda?
Real rants from real employees. Read before you apply.