Upvest, founded in 2017, enables any financial institution to offer great investment experiences to its customers. Upvest is an investment firm regulated by the German supervision authority (BaFin). The company currently employs 160+ people across Europe with its headquarters based in Berlin, Germany.

The company is backed by the world’s largest venture capital funds and investors including Bessemer Venture Partners, BlackRock, Earlybird, HV Capital, Notion Capital, and ABN Amro Ventures, as well as by renowned fintech entrepreneurs (including Maximilian Tayenthal, founder of N26, and Felix Haas, founder of IDnow).

We’re looking for fintech enthusiasts to join us in creating the financial infrastructure of tomorrow. We’re building the first European Investment API to enable any financial institution offering a wide range of efficient and transparent investment products, such as stocks and ETFs in nominal, portfolio, and fractional form. Our mission and vision is to make investing as easy as spending money.

We’re based in Berlin but would consider hiring remotely in Germany for this role.
Your mission

To take ownership of our IT and Security governance, risk, and compliance team (IT GRC) to establish and assess Upvest's compliance and risk posture as it pertains to our information assets. You will ensure that Upvest maintains compliance with relevant regulatory and other industry-standard frameworks by helping to implement best practice processes across the entire company.

This role will give you the opportunity to

• Manage the IT GRC function (2nd Line-of-Defense) in a burgeoning bank

• Implement cutting edge industry best practices in our policies and processes thanks to our blue-sky environment

• Develop and provide technical and security expertise for the development of Upvest's information security risk management and related compliance operations

• Manage information security risks and compliance by assessing risks, defining policies, support risk assessments of process and system owners, monitor risks, initiate and support control development and monitor control effectiveness.

• Work closely with Upvest's Chief Security Officer and wider Security team, Head of Compliance, Head of Risk, General Counsel, as well as the Product Engineering and TechOps teams.

Job requirements

• Several years of professional experience in a senior information security leadership role with in the financial industry or comparable environments

• In-depth knowledge of cybersecurity frameworks, risk management, and compliance standards such as ISO27001, SOC2 and GDPR

• Experience with BaFin's IT regulatory framework (BAIT)

• Exceptional stakeholder management to coordinate internal security implementations and corporate with external stakeholders and auditors

• Capabilities and mentality to implement structures and controls in an agile and fast-paced environment

• Fluent in English and German

Due to our close working relationship with our auditors and the German regulatory authorities, a good level of German proficiency is desired. While being based in Berlin would be great (we support relocation), we are open to fully remote candidates for this role.

Why Upvest?

• We're working on solving a hard problem: fixing the European securities financial infrastructure that empowers more people to be able to invest. You have the opportunity to contribute to this change.

• We invest in you. From access to a personal coach, development budget and plenty of opportunities to grow in your role.

• We take hiring seriously with a strong focus on keeping a high bar when interviewing (equally important is that we hire decent people, who are passionate about their craft and helping us achieve our shared mission).

• While we're not quite fully-remote, we are committed to being a flexible employer, as we understand you don't have to be in the office to do your best work.

• We live a culture of empowerment, trust (that we hire the best people and get out of their way) and openness (there's a greater advantage in sharing information than keeping it to ourselves).

Our values:

• Learn and grow. We aim high to shape our future. We give and request honest feedback knowing that we develop together. Progression over Perfection.

• Team first. We make it easy for others. We value our differences and are open to others' opinions. We win and celebrate together! Team over Egos.

• Own the outcome. Whether we win or we lose, we stand together. We are proactive and get the job done. Outcome over Process.

• Tell the story. We always start with the why. We share knowledge to empower others. Transparency over Complexity.

Upvest is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.