We’re looking for fintech enthusiasts to join us in creating the financial infrastructure of tomorrow. We’re building the first European Investment API to enable any financial institution to offer a broad range of investment products in their apps. Our view is backed by Europe's largest tech VCs (Earlybird, Notion Capital, Partech, HV Capital, ABN AMRO Ventures) by renowned fintech entrepreneurs (including Maximilian Tayenthal, founder of N26, and Felix Haas, founder of IDnow) and Bessemer Venture Partners in the USA.

We’re based in Berlin but would consider hiring remotely for this role. If you do want to move to Berlin though, we’re happy to support your relocation.

At Upvest, our vision is to make investing as easy as spending money. By enabling any business to offer investment opportunities, our goal is to empower anyone to invest. Today, we count 100+ talented people from 30 different countries.

Your mission:

As an IT GRC (Governance, Risk, and Compliance) Analyst, you will be excelling in Upvest’s security program to maintain trust with clients, stakeholders, and employees by ensuring that the systems and processes relating to security and IT risk are world-class. You are a central contact person for questions concerning IT Risk and IT Compliance and will focus on taking over vital parts of our Information Security Management System (ISMS) - from risk analysis to implementation, monitoring, and control of adopted measures. This role combines the methodological work of IT GRC as well as operational assurance tasks.

This role will give you the opportunity to:

• IT Governance | Support and further development of the ISMS including the creation and implementation of policies, standards, guidelines, and procedures in cooperation with the respective process owners.
• IT Risk Management | Support and further development of the IT Risk & Business Continuity methodology. Conducting third-party and internal risk and continuity assessments.
• IT Compliance Management | Definition and implementation of baseline controls. Continuous ISMS maturity assessment based on ISO 27001/2022, as well as SOC2.
• IT Audit Management | Support in the coordination of the IT General Controls and Application Controls Audit. Conducting preliminary IT Audits to prepare the IT teams. Planning, execution, and reporting of IT Security audit as 2nd Line of Defence audit.
  

Job requirements:

• You have a University degree in the field of Computer Science, Information Technology/Security, or equivalent work experience in the area of IT GRC/IT Security.
• You have a strong knowledge of IT Governance, Risk, Compliance, and Audit Systems, with an experience of 3-5 years.
• You have excellent communication skills, written and oral, in English with the ability to engage with a multilingual international stakeholder base and teams at various levels (Sr. Management to C level).
• You can prove your knowledge through recognized certifications such as CISSP, Security+, CISM, CISA, ISO/IEC 27001 Lead Implementer, etc.
  

Why Upvest?

• We're working on solving a hard problem: fixing the European securities financial infrastructure that empowers more people to be able to invest. You have the opportunity to contribute to this change.
• We invest in you. From access to a personal coach, development budget and plenty of opportunities to grow in your role.
• We take hiring seriously with a strong focus on keeping a high bar when interviewing (equally important is that we hire decent people, who are passionate about their craft and helping us achieve our shared mission).
• While we're not quite fully-remote, we are committed to being a flexible employer, as we understand you don't have to be in the office to do your best work.
• We live in a culture of empowerment, trust (that we hire the best people and get out of their way) and openness (there's a greater advantage in sharing information than keeping it to ourselves).

Our values:

• Learn and grow. We aim high to shape our future. We give and request honest feedback knowing that we develop together. Progression over Perfection.
• Team first. We make it easy for others. We value our differences and are open to others' opinions. We win and celebrate together! Team over Egos.
• Own the outcome. Whether we win or we lose, we stand together. We are proactive and get the job done. Outcome over Process.
• Tell the story. We always start with the why. We share knowledge to empower others. Transparency over Complexity.