IT Governance, Risk, and Compliance Analyst, Upvest
Relocation support available
Investment API
Job no longer available
Investment API
201-500 employees
Job no longer available
Relocation support available
201-500 employees
Company mission
To make investing as easy as spending money and to enable businesses to build investment experiences their customers love.
Role
Who you are
- You have a University degree in the field of Computer Science, Information Technology/Security or equivalent work experience in the area of IT GRC/IT Security
- You have a strong knowledge of IT Governance, Risk, Compliance and Security, with an experience of 3-5 years
- You have excellent communication skills, written and oral, in English with the ability to engage with a multilingual international stakeholder base and teams at various levels (Sr. Management to C level)
What the job involves
- We’re looking for fintech enthusiasts to join us in creating the financial infrastructure of tomorrow
- We’re building the first European Investment API to enable any financial institution to offer a wide range of efficient and transparent investment products, such as stocks and ETFs in nominal, portfolio, and fractional forms
- We’re based in Berlin but are also open to hiring remotely in Germany or Estonia for this role
- If you're currently based elsewhere but would like to move to Germany, we’re happy to support your relocation
- As an IT GRC Analyst, you will play a key role in strengthening Upvest’s security program, ensuring trust with clients, stakeholders, and employees. You will be responsible for maintaining world-class security and IT risk management systems and processes
- In this role, you will act as a central point of contact for IT Governance, Risk, and Compliance (GRC) inquiries across the organization. You will communicate, triage, and report issues and risks to the IT GRC team while overseeing critical aspects of our Information Security Management System (ISMS) from risk analysis to implementation, monitoring, and control of security measures
- Additionally, you will contribute to the development and enhancement of our Third-Party Management program, ensuring vendor security and compliance. This position blends methodological IT GRC responsibilities with operational assurance tasks, providing a well-rounded opportunity to drive security excellence within the organization
- IT Governance: Supporting and further developing our ISMS including the creation and implementation of policies, standards, guidelines and procedures in cooperation with the respective process owners
- IT Risk Management: Enhancing the IT Risk & Business Continuity Management Process. Conducting third party, internal risk and business continuity assessments
- IT Compliance Management: Defining and implementing baseline controls. Continuous ISMS maturity assessment based on ISO 27001/2022, DORA, etc.
- IT Audit Management: Support in the coordination of the IT General Controls and Application Controls Audit. Conducting preliminary IT Audits to prepare the Business and Engineering teams. Planning, execution and reporting of IT Security audit as 2nd Line of Defence audit
Our take
Upvest is a fintech startup that empowers financial services companies to provide their customers with access to a full range of financial assets, including stocks, ETFs and crypto products. Upvest's investment API integrates seamlessly with its customers existing systems and is designed to scale easily, freeing companies from the need to develop their own brokerage and custody infrastructure from scratch.
As one of the few companies in Germany that is licensed for both the custody of traditional securities and crypto, Upvest is able to provide its services across Europe. Its solution has been readily adopted by some major players in the space including Ginmon, Vivid and ABN AMRO.
Upvest is backed by a number of Europe's largest tech VCs, alongside American investment monolith BlackRock. In 2023, it closed a VC investment round that one of the largest in the German fintech arena. It has gone on to secure further funding which supports ventures such as absorbing the complexity of new local tax wrappers, rolling out AI-supported investment engines, and speeding up the rate at which clients can bring pension products to market .
Steph
Company Specialist at Welcome to the Jungle
Insights
40% employee growth in 12 months
Company
Funding (last 2 of 9 rounds)
Mar 2026
$90m
LATE VC
Dec 2024
$105.1m
SERIES C
Total funding: $289m
Company benefits
- Greenfield projects - We’re building something quite complex. A first in Europe. This means you get to work with cutting-edge technologies, with no legacy code.
- Wellbeing - Everyone here has access to our in-house coach. You can have regular sessions to support you personally and professionally. We also believe it’s important to have time out to rest and recover, which is why we offer 30 days’ holiday.
- Development - In keeping with one of our values, ‘Learn and grow’, every Upvenger has access to a development budget. And in line with one of our other values, ‘Own the outcome’, how you make the most of it is up to you.
- Flexibility - We work in a hybrid set-up, with the team spread around Germany and other parts of Europe. We give you the choice and budget to work where you’re most comfortable and productive, either at home or in the office. You choose.
Company HQ
Kollwitzkiez, Berlin, Germany
Leadership
Martin Kassing
(Founder & CEO)They have experience in fintech, private equity and capital markets. Founded another fintech, Shop.co, which was acquired by Klarna.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 12 more jobs at Upvest