GRC Manager

To take ownership of our IT and Security governance, risk, and compliance processes to establish and assess Upvest's compliance and risk posture as it pertains to our information assets. You will ensure that Upvest maintains compliance with relevant regulatory and other industry-standard frameworks

You'll have the opportunity to provide technical and security expertise for the development of Upvest's information security risk management and related compliance operations. You would report to the CSO and also work closely with Upvest's Heads of Compliance and Risk, General Counsel, as well as the Product Engineering and TechOps teams.

Requirements

About you

You have a strong technical understanding of IT and cyber security, with demonstrable experience establishing and operating a technical risk and compliance function. You will have worked with common technical and security standards such as ISO27001, SOC2 and

GDPR and any experience with BaFin's regulatory frameworks (e.g. BAIT, MaRisk) is a plus. You have the ability to operate with a high degree of autonomy and lead the organisation-wide information security compliance program, ensuring IT activities, processes, and procedures meet defined requirements, policies and regulations.

This includes the ability to develop security standards and guidelines based on best practices and industry standards. You will also be the internal lead for any audits pertaining to these areas. You will have excellent written and verbal communications skills, and the ability to interact with a wide variety of internal stakeholders and provide clear reporting of the company's compliance posture.

What we offer

We're working on solving a hard problem: fixing the European securities financial infrastructure that empowers more people to be able to invest. You have the opportunity to contribute to this change.

We invest in you. From access to a personal coach, development budget, and plenty of opportunities to grow in your role.

We take hiring seriously with a strong focus on keeping a high bar when interviewing (equally important is that we also hire decent people who are passionate about their craft and helping up achieve our shared mission).

While we're not quite fully remote, we are committed to being a flexible employer as we understand you don't have to be in the office to do your best work. We live a culture of empowerment, trust (that we hire the best people and get out of their way), and openness (there's a greater advantage in sharing information than keeping it to ourselves).

We ensure we take time to have fun as a team. We're looking forward to having more time in person again once this becomes possible again.

Why Upvest?

We’re building the first European Investment API to enable any financial institution to offer a broad range of investment products in their apps. Our view is backed by Europe's largest tech VCs (Earlybird, Notion Capital, Partech, HV Capital) and by renowned fintech

entrepreneurs (including Maximilian Tayenthal, founder of N26, and Felix Haas, founder of IDnow).

Our vision is to make investing as easy as spending money. By enabling any business to offer investment opportunities to anyone, our goal is to empower 100 million people to invest (by 2025)