IT GRC Specialist – Third-Party Risk Management

About the role

An international fintech company offering digital consumer loans in five countries is looking for a highly organised and detail-oriented GRC Specialist to join its Security & IT Compliance team. Based in Wiener Neustadt, the IT department supports daily Third-Party Risk Management and other IT risk operations, working closely with the IT Compliance Specialist and cross-functional stakeholders to mature the internal IT risk register and remediation efforts.

Key responsibilities

• Contribute to third-party risk management and vendor security assessments
• Maintain and update the IT Risk Register, recording risks, action plans, statuses, due dates and owners
• Follow up on remediation activities with risk owners, IT teams and other stakeholders until closure
• Support the identification, assessment, prioritisation and review of IT risks with relevant stakeholders
• Support audits, reviews and compliance activities by providing risk-related documentation, evidence and explanations of the risk management process
• Help improve IT risk management processes, templates and reporting practices

Required profile

• At least 2 years of relevant experience in a security, risk, compliance or related IT role
• Experience supporting vendor risk management, including due diligence, onboarding, ongoing monitoring and offboarding
• Hands-on experience reviewing vendor security compliance reports such as SOC 2 Type II, ISO 27001 and PCI-DSS
• Demonstrated experience maintaining and updating an IT Risk Register
• Good understanding of IT processes and ability to talk to technical and non-technical stakeholders
• Willingness to work in an evolving environment where processes are still being developed

Required skills

• Risk assessment methodologies, including calculating risk scores and defining risk treatment plans
• Analytical and problem-solving skills

What we offer

• Remote work, up to 100% remote or hybrid, depending on preference
• Flexible working hours, covering only core hours with the team
• 34-hour working week at a competitive full-time salary
• Courses, workshops and learning opportunities within a badge system