Your mission

As our Junior Information Security Associate, you will drive key parts of our governance, risk, and compliance (GRC) program in a regulated fintech environment. You’ll own recurring GRC processes end-to-end (such as evidence cycles, control testing, risk workflows), partner with control owners across the business, and help keep us continuously audit-ready. You’re hands-on, independent, and able to translate requirements into practical controls, while knowing when to escalate and when to simplify.

What you’ll do 

• Governance & control framework ownership: Own and maintain parts of the ISMS; ensure policies/standards are implemented in a measurable way; support security-by-design governance for new initiatives.
• Assurance & audit execution: Plan and run audit readiness activities (ISO 27001/SOC 2/internal audit/regulatory requests): timelines, evidence plans, stakeholder coordination; review evidence for quality (period coverage, completeness, traceability), challenge gaps, and drive remediation with control owners; draft clear, consistent responses to auditors and internal stakeholders; maintain an action plan and verify closure.
• Risk management: Facilitate risk assessments for systems/projects/vendors with appropriate depth; document outcomes and treatment plans; maintain the risk register quality; identify systemic themes (repeat findings, control weakness patterns) and propose improvements to reduce residual risk.
• Third-party risk & compliance enablement: Lead parts of third-party risk management: due diligence reviews, tracking remediation commitments, and supporting security contractual requirements; Partner with Procurement/Legal/Business owners to ensure proportionate security requirements for vendors (especially critical service providers).
• Control testing & continuous improvement: Execute control design/operating effectiveness testing for a defined control set; document results and recommend improvements; produce GRC reporting and metrics for leadership (audit status, overdue actions, risk trends, control health indicators); improve GRC workflows through templates, playbooks, automation, and tooling (where applicable).

Who you are 

• You’re proactive and ownership-driven: you don’t wait to be told what’s missing; you spot gaps and fix them.
• You can balance rigor with pragmatism, applying controls proportionate to risk and business criticality.
• You write clearly and persuasively, especially when documenting controls, risks, and audit responses.
• You’re comfortable challenging constructively; asking “show me” and improving evidence and control quality without being obstructive.
• You’re collaborative and calm under deadline pressure (audits, regulator requests, and escalations).

Your mission

As a Specialist in Strategic Finance at Bitpanda, you will play a key role in driving financial excellence and supporting strategic decision-making across the organization. You’ll be responsible for the creation and assessment of business cases, managing purchase orders, supporting month-end closing activities, and acting as the financial counterpart for selected performance accounts and business areas. You’ll contribute to reporting packages, enhance financial models, and serve as a valued finance business partner to cross-functional stakeholders. You’ll be part of the Strategic Finance team embedded within the CFO area, working closely with stakeholders across all levels of the organization to ensure robust financial oversight and impactful business insights.

What you’ll do 

• Serve as a trusted finance business partner to functional teams, enabling data-driven decision-making and promoting financial acumen across the business.
  Identify and drive process improvements and automation opportunities to increase efficiency in planning and reporting cycles.
• Contribute to month-end closing processes, including accruals, reclasses, and journal entry preparation, ensuring accurate and timely financial reporting.
• Develop and evaluate business cases for strategic initiatives, providing financial insights and scenario modelling to support investment decisions.
• Contribute to financial modelling efforts, including forecasting, long-range planning, and scenario analysis, aligned with business objectives.
• Support and enhance reporting packages and dashboards, ensuring timely delivery of actionable insights to management and other stakeholders.

Who you are 

• Experienced FP&A Specialist or Controller with a strong foundation in finance, accounting, and business partnering, ideally with 3–5+ years of experience in a fast-paced environment.
• Proven track record in building and assessing business cases, budgeting, and supporting operational decision-making.
• Highly organised, proactive, and detail-oriented with a passion for accuracy and turning numbers into insights.
• Strong interpersonal and communication skills, capable of working with stakeholders at all levels, including senior leadership.
• Comfortable navigating PO systems and financial closing processes, with a working knowledge of ERP systems (e.g. NetSuite) and planning tools (e.g. Anaplan). Familiarity with large datasets and basic SQL is a plus.

Your mission

As an Information Security Senior Specialist, you will lead and scale major elements of our security governance in a regulated fintech environment. You’ll own complex, cross-functional GRC domains (e.g., ISMS/ISO 27001 at scale, regulatory readiness, enterprise technology risk, third-party risk for critical vendors, compliance in key partnerships), drive measurable improvement in control effectiveness, and act as a trusted advisor to senior stakeholders.

What you’ll do

• Information Security Operating Model & GRC Ownership: Own and evolve one or more GRC domains end-to-end (e.g., ISMS operations, BCM, risk governance), including strategy, annual plan, cadences, and success metrics. Drive control rationalization and proportionality: tighten controls for critical/regulated assets and streamline low-risk areas to ensure an efficient, risk-aligned posture.
• Risk Management & Strategic Decision Support: Facilitate and challenge high-impact risk assessments (new products, major architectural changes, critical vendors), ensuring consistency and defensible rationale. Drive risk treatment at scale: align owners, negotiate timelines, track commitments, and escalate where residual risk remains above appetite.
• Audit, Assurance & Continuous Control Testing: Lead complex audits and assessments end-to-end (multi-entity, regulator-facing), including readiness, walkthroughs, and remediation. Design and run a risk-based control testing program to identify weaknesses and drive durable remediation (process fixes, automation, tooling) while translating regulatory requirements into structured internal work programs.
• Third-Party Risk & Critical Supplier Oversight: Set due diligence depth and ongoing monitoring requirements for critical suppliers (e.g., cloud, payments, identity, SaaS); partner with Procurement/Legal on security contract requirements to ensure enforceable obligations and measurable oversight across the supply chain.
• Enablement & Leadership through Others: Mentor Specialists, Associates, and Senior Associates; set quality standards for documentation, evidence, and stakeholder engagement. Act as a “GRC translator” for engineering and operations teams, helping them implement requirements efficiently and consistently across the organization.

Who you are 

• Typically 6–10 years of experience in information security GRC, audit/assurance, risk management, compliance, or adjacent security roles.
• Proven track record leading audits/assessments and driving remediation across multiple teams and systems.
• Strong working knowledge of ISO 27001 and DORA (and/or SOC 2 / PCI DSS / NIST) with ability to design controls, define evidence, and test effectiveness.
• Strong understanding of technology risk across cloud, IAM, SDLC governance, incident management, vulnerability management, logging/monitoring, and third-party risk.
• Excellent written and verbal communication; able to produce executive-ready materials and auditor-facing narratives.

Your mission

Join our Group Risk Management Team as a Financial Risk Manager, focusing on the identification, assessment, and monitoring of credit, liquidity, and market risk. In this role, you will sit at the intersection of Traditional Finance (TradFi) and digital assets, acting as the primary risk owner for our Real Stocks and Commodities products, and leading the risk oversight for future securities-related launches.

Reporting to the FRM Lead, you will be responsible for operating and optimizing Bitpanda’s Financial Risk Management (FRM) models. You will use your quantitative background and traditional market expertise to provide data-driven risk assessments, acting as a key advisor to our business and trading operations.

What you'll do 

• Serve as the dedicated risk owner for TradFi asset classes, specifically Real Stocks, ETFs, and Commodities.
• Develop, maintain, and optimize FRM models to establish risk limits and monitor global exposure across our multi-asset platform.
• Analyze and mitigate complex cross-asset risks, including the management of liquidity drag between T+2 TradFi settlement cycles and 24/7 crypto operations.
• Advise product and business owners on risk identification and mitigation strategies, providing the quantitative analysis required for executive-level decision-making.
• Act as the main point of contact for Bitpanda’s operational teams and trading desk, ensuring risk frameworks are integrated efficiently alongside fast-paced product delivery.

Who you are

• Strong professional background in traditional financial markets (Stocks, ETFs, Commodities), with a clear understanding of market structures, settlement cycles, and traditional risk dynamics.
• Advanced Python programming skills for developing and maintaining risk models, paired with a working knowledge of SQL for data manipulation.
• Previous experience in risk management within a brokerage, investment bank, or scaling fintech, with a core focus on market, credit, or liquidity risk.
• Direct experience building or managing risk frameworks for Margin Trading or leveraged stock products is highly desirable.
• Ability to work autonomously in a fast-paced environment and take end-to-end ownership of complex quantitative tasks.