Senior Specialist, Internal Audit

Bitpanda

WHO WE ARE  We simplify wealth creation. Founded in 2014 in Vienna, Austria by Eric Demuth, Paul Klanschek and Christian Trummer, we’re here to help people trust themselves enough to build their financial freedom — for now and the future. Our user-friendly, trade-everything platform empowers both first-time investors and seasoned experts to invest in the cryptocurrencies, crypto indices, stocks*, precious metals and commodities* they want — with any sized budget, 24/7. Our global team works across different cultures and time zones, bringing our products to more than 7 million customers, making us one of Europe’s safest and most secure platforms that powers modern investing.   Headquartered in Austria but operating across Europe, our products are built by fast-moving, talented, “roll-up-your-sleeves-and-make-it-happen” kind of people. It’s these diverse perspectives and innovative minds operating as ONE TEAM that keep Bitpanda at the cutting edge of our industry. So if you’re someone who thinks big, moves fast and wants to make an impact right from day one, then get ready to join our industry-changing team. Let’s go!     YOUR MISSION As Senior Specialist Anti Money Laundering, you will be responsible for ensuring a robust, effective and scalable AML/CFT and sanctions compliance framework for Bitpanda’s activities in Germany. You will act as the key senior AML specialist in Germany, ensuring compliance with the German Money Laundering Act, BaFin expectations, FIU requirements, applicable EU AML/CFT rules, the Transfer of Funds Regulation / Travel Rule, and Bitpanda Group standards. WHAT YOU’LL DO * Support the AMLO: Deputise for the appointed AMLO/Geldwäschebeauftragter and manage regulatory reporting, correspondence, and interactions with BaFin, FIU, and auditors. * Ensure Regulatory Alignment: Maintain compliance with the German GwG, BaFin guidance, FIU expectations, MiCAR, MiFID, EU Transfer of Funds Regulation, and sanctions. * Execute AML Control Framework: Design, execute, and test second-level AML controls, while tracking and remediating any audit or internal findings. * Oversee High-Risk Compliance: Manage PEPs, high-risk customer reviews, Source of Funds/Wealth assessments, transaction monitoring, sanctions escalations, and onboarding decisions. * Drive Automation & Audits: Support internal/external audits, ensure robust documentation trails, and collaborate with cross-functional teams to automate workflows and data-led processes. WHO YOU ARE * Experienced AML Professional: Bring 3–6 years of hands-on AML/CFT experience in financial services, fintech, payments, or crypto (ideally as a deputy MLRO or senior analyst). * Regulatory Expert: Hold a solid working knowledge of German GwG, BaFin expectations, FIU reporting, MiCAR, MiFID, EU Travel Rule, and crypto-asset services. * Crypto Risk Savvy: Understand crypto-native financial crime risks, including self-hosted wallets, blockchain analytics, mixers, bridges, and sanctions evasion. * Process & Stakeholder Oriented: Able to translate regulations into scalable, automated processes and confidently interact with senior management, regulators, and cross-functional teams. * Language: Fluency in both English and German.   WHAT’S IN IT FOR YOU * Flexibility to work where you thrive – Enjoy the freedom of our Hybrid working model, combining onsite collaboration and remote work, with an additional 25 days per year to work from a city or country of your choice. * Reward for your impact – Receive a competitive total compensation package aligned with Bitpanda’s pay-for-impact policy, including participation in our stock option plan. * Support for your mental wellbeing – Access confidential coaching, counselling, and mental health resources whenever you need them through OpenUP. * Time to recharge – On top of your standard annual leave, Prioritise your wellbeing with 3 additional days of paid time off to rest, reset, and recharge, available once you’ve been with us for 6 months. * Continuous learning and growth – Grow your skills and stay ahead in your career with unlimited access to Udemy’s library of online courses at your own pace. * Exclusive perks and rewards – Enjoy discounts, rewards, and perks from partners worldwide across lifestyle, wellness, tech, and travel. * Support during life milestones – Take advantage of our additional 8 weeks of gender-neutral new parent leave to welcome and bond with your new addition to the family. * Fuel and focus on-site – Pandas in Vienna, Bucharest, Barcelona, and Berlin can enjoy free onsite dining, with freshly prepared lunches and snacks to keep you fueled and focused all day long. * Recognition for your contributions – Celebrate milestones and achievements with recognition and rewards for your Tenure at Bitpanda. * Show your Bitpanda pride – Access exclusive Bitpanda-branded merchandise and gear to represent. * Connect and celebrate with your team – Join unforgettable company events, from our Winter Party in Vienna to gatherings worldwide, fostering fun, connection, and celebration        .…and even more location-specific benefits designed to make life at Bitpanda even more rewarding wherever you are.   Above all, you will have the opportunity to learn and grow as part of Bitpanda’s incredible journey towards being Europe’s future #1 investment platform. BITPANDA IS COMMITTED TO FOSTERING A FAIR AND EQUAL ENVIRONMENT BASED ON TRUST AND MUTUAL RESPECT. WE BELIEVE THAT A DIVERSE AND INCLUSIVE WORKPLACE IS PARAMOUNT TO OUR SUCCESS AND WE ARE COMMITTED TO BUILDING A TEAM THAT REPRESENTS A WIDE VARIETY OF BACKGROUNDS, PERSPECTIVES, AND SKILLS. * THESE BENEFITS MAY BE ADJUSTED AT BITPANDA’S DISCRETION AND DO NOT APPLY TO OUR INTERNSHIPS AND EXCEPTIONS TO OUR HYBRID WORKING POLICY APPLY TO TEAMS WITH SHIFT SCHEDULES OR FOR FOLKS WHOSE ROLES REQUIRE THEM TO BE IN-OFFICE (THINK: WORKPLACES TEAM OR IT).

Upsun

ABOUT UPSUN (FORMERLY PLATFORM.SH)  Upsun is the cloud application platform humans and robots love. It is built for today’s hybrid teams, where AI agents write and test code and humans focus on solving the problems that really matter. Developers, DevOps engineers, and platform teams use Upsun to build, ship, and scale confidently without wrestling with backend infrastructure. We give you your time back. You get: * Predictable performance, even at scale * Secure, compliant environments by default  * Real-time observability and profiling built in * Cloning, configuration, and provisioning in seconds  * AI-ready features that plug directly into your stack The name says it all. "Up" means uptime, reliability, and acceleration. "Sun" reflects our follow-the-sun-support, a 24x7, globally distributed support team keeping the lights on while you rest. Our core belief is that software should power brighter solutions and greater innovation. Upsunners are a remote, global workforce, and we thrive in a multicultural team. We are committed to open source and an open, welcoming environment. Our team spans the globe and the experience spectrum. What's our commonality, our cultural fabric? A curious spirit and a thirst for knowledge; an eagerness for innovative ideas and cultures. We believe we can build anything together in an environment that frees you to do your best work. Our values:  🌿 We make a positive impact. ✨ We aim for the stars. 💚 We care for each other.  IMPACT OF A SENIOR RISK & AUDIT SPECIALIST  As a Senior Risk & Audit Specialist at Upsun, you help keep our security, risk, audit, and compliance work moving with clarity, care, and consistency. Reporting to the Director, Risk & Audit, you'll work closely with teams across Security, Engineering, IT, Legal, Product, and Sales to keep key audits and certifications (including ISO 27001, SOC 2, PCI DSS, and HIPAA) on track and our global business audit-ready. You're practical, organized, and curious; someone who enjoys making complex requirements easier to understand and thrives when balancing planned work with time-sensitive audit and customer requests. You partner with control owners across the business to coordinate evidence, monitor risk, and turn complex requirements into guidance that's easy to act on. Beyond keeping audits on track, you contribute to the long-term evolution of our risk and compliance program by supporting readiness for new and expanding assurance needs, simplifying repeatable processes, and improving evidence quality. Your attention to detail, cross-functional mindset, and clear communication help leadership stay informed and give our customers confidence in our security posture. WHAT TO EXPECT * Audit & Certification Support: Support active and upcoming audits, including ISO 27001, SOC 2, PCI DSS, HIPAA, and other relevant assurance work by coordinating evidence collection, reviewing evidence quality, scheduling walkthroughs, and following up with control owners. * Risk & Control Management: Support risk assessments, risk register updates, control monitoring, issue tracking, and risk treatment follow-up by working with teams to identify control gaps, agree on practical actions, and track remediation through to completion. * Third-Party Risk Management: Conduct third-party risk management reviews to support a comprehensive view of organizational risk. * Compliance Program Support: Support ongoing compliance activities across established frameworks and emerging readiness work (including Australia ISM/IRAP/HCF, NIS2, and ISO 42001/AIM) while maintaining policies, procedures, control narratives and supporting documentation. * Customer & Stakeholder Support: Respond to customer and prospect security or compliance questions in partnership with Sales, Legal, Security, and Product, and support updates to the Trust Center and other trust documentation. * Reporting & Continuous Improvement: Prepare clear updates on audit status, risks, blockers, metrics, and remediation progress for leadership and look for opportunities to simplify repeatable processes and reduce audit friction for control owners. * Tooling & Process Management: Use risk, audit, and compliance tools to keep work organized, traceable, and easy to report on. * Internal Audit Support: Support internal audit and review activities as needed. WHAT YOU BRING * Risk & Compliance Experience: 5+ years of experience in risk, audit, compliance, governance, security assurance, or a closely related area. * Audit Experience: Hands-on experience supporting audits, evidence collection, control testing or monitoring, and remediation tracking. * Framework Knowledge: Working knowledge of security and compliance frameworks such as ISO 27001, SOC 2, PCI DSS, HIPAA, ISO 42001, GDPR, PIPEDA or similar standards. * Communication Skills: Ability to explain requirements clearly to both technical and non-technical audiences. * Organization & Prioritization: Strong organization and prioritization skills, especially when managing several deadlines at once. * Judgment & Problem-Solving: Good judgement, attention to detail, and a practical approach to solving problems. * Remote & Cross-Functional Collaboration: Comfort working in a remote, global environment with cross-functional teams across varied timezones.   BONUS POINTS * Experience with governance, risk, and compliance tools or audit management platforms * Experience supporting customer assurance, security questionnaires, or trust documentation * Working knowledge of Third-party risk management (TPRM) * Relevant certifications such as CISA, CRISC, CISSP, CC, CISM, CGEIT, ISO 27001, ISO 42001 or similar WHERE WE HIRE At Upsun, remote work isn't just a trend - it's our foundation. The freedom of remote work with the support of a diverse, global team has been our successful model for over a decade. Our culture celebrates flexibility and collaboration, and while we have team members in over 30 countries around the globe, we are currently focused on hiring for this role in Canada, Spain, Germany, France, or the United Kingdom. Although we’re unable to provide visa sponsorship at this time, we welcome applications from all qualified candidates who are legally authorized to work in these countries.  HOW WE HIRE We know that a great hire won’t meet every requirement that we’ve outlined. If you can see yourself elevating the team, we want to hear your story. Few of us would be here had we not taken a chance. You can expect 5 interviews to follow the order below. Should you successfully move through the entire process you will have the opportunity to meet with a variety of Upsunners. Our goal is to ensure you can make the most informed decision on whether this role, and our culture aligns with what you’re looking for in your future working environment.  1. 45 Minutes with Talent Acquisition  2. 60 Minutes with Hiring Manager (Director, Risk & Audit) 3. 60 Minutes with Team (IC's) 4. 60 Minutes Cross Team (Leaders) 5. 45 Minutes with Executive (CFO) All roles require background checks. WHAT WE OFFER 💡 A product you can believe in - Join us in transforming how businesses build and manage web applications, driven making a positive impact as a proud B Corp. 🏆 An Award-Winning Workplace - We’ve been recognized by Forbes’ Top 30 Companies for Remote Jobs and France’s Best Workplaces for Women. 🗣️ A culture that values your voice - Join a flexible, open, and inclusive work environment where your voice is encouraged, and your ideas shape our growth and evolution. 🌎 A global team - Collaborate with colleagues from diverse backgrounds across the world, embracing different perspectives 🎉 Benefits and perks - Make the most of what matters to you > 🏝 Flexible PTO > > 🩺 Comprehensive healthcare coverage (UK, Canada, France, Spain, USA) > > 📈 Company stock options > > 🧠 Professional development budget > > 💻 Office equipment budget > > 💆‍♀️ Wellness budget > > 🧳 Annual team gatherings > > 🛜 Internet reimbursement > > 👶 Inclusive parental leave > > ✈️ Remote work travel program YOU BELONG HERE At Upsun, we celebrate diversity in all its forms and are committed to fostering an inclusive, equitable, and supportive workplace where everyone can thrive. We embrace and value different perspectives, backgrounds, and experiences, because they make us stronger as a team. Whoever you are, wherever you're from, and whatever path you've taken, you are welcome here. We encourage you to bring your whole self to work, connect with others, and share your passion. If you need accommodations at any stage of our hiring process, please let us know. We're here to ensure an accessible and comfortable experience for you.

MoonLake Immunotherapeutics

JOB PURPOSE The Senior Specialist Drug Product and Device (GxP) provides comprehensive support to Technical Operations and perform essential oversight of Good Manufacturing Pratice (GMP) compliance for Drug Product (DP) and Device vendors. They will manage all Quality-related issues, oversee CAPAs, Change Controls, and handle GMP-related Temperature Excursions and Technical Complaints, collaborating effectively with the rest of the MoonLake Quality team, the Technical Operations team and consultants (where necessary). This role is responsible for the receipt, assessment, investigation, documentation, and closure of technical complaints in accordance with GxP regulations (including GMP, GCP, and GDP, as applicable). The role ensures that all technical complaints, such as device issues, temperature excursions, packaging defects, or product quality concerns, are managed in compliance with internal procedures and regulatory expectations and are appropriately recorded, investigated, trended, and reported within the electronic Quality Management System (eQMS). This role supports patient safety, product quality, and regulatory compliance across clinical and commercial activities. Key Accountabilities: * Technical Complaint Management * Act as the primary coordinator for technical complaints, ensuring complaints are logged, assessed, investigated, and closed within defined timelines using the eQMS (e.g., Qualio). * Ensure accurate completion of complaint records, including complaint details, product information, batch/lot numbers, and classification * Perform initial assessment and classification of complaints (e.g., technical vs safety‑related) and ensure appropriate escalation when required * Investigation & Root Cause Analysis * Coordinate and document complaint investigations, working with internal stakeholders and external vendors as required. * Support or lead root cause analysis, ensuring conclusions are evidence‑based and adequately justified. * Ensure CAPAs, change controls, or quality issues are raised and tracked where required following investigation outcomes. * GxP Compliance & Documentation * Ensure all complaint handling activities comply with applicable GxP regulations, internal SOPs, and Quality Management System requirements. * Maintain inspection‑ready documentation, ensuring complaint records are complete, traceable, and auditable. * Support internal and external audits and inspections by providing complaint data, metrics, and documentation as required * Work with the MoonLake Quality Team to manage and develop Quality Systems and procedures within the company * Cross‑Functional Collaboration * Liaise with Clinical Operations, Technical Operations, Quality Assurance, Pharmacovigilance, and external vendors/CDMOs to support timely resolution and Drug Product / Device assembly, labelling and packaging activities, including complaints. * Support alignment between technical complaints and related quality processes such as deviations, recalls, and serious breaches, where applicable. * Work with the Drug-Device Development Team to define and oversee activities sub contracted to vendors by MoonLake, with specific emphasis on quality and compliance requirements * Trending & Reporting * Support trend analysis of technical complaints, contributing to periodic quality reports and management review activities. * Identify recurring issues and contribute to continuous improvement initiatives within the Quality System. YOUR PROFILE Education:  * Degree in Life Sciences, Engineering, Pharmacy, or a related scientific discipline (or equivalent experience). Experience:  * Experience working in a GxP‑regulated environment (pharmaceutical, biotech, medical device, or clinical research). * Hands‑on experience with complaint handling, quality issues, or deviation management within a Quality Management System. * Familiarity with electronic QMS platforms (e.g., Qualio or similar). * Experience with device or combination product complaints (desirable). * Exposure to temperature excursions, packaging complaints, or technical product issues (desirable). * Experience supporting regulatory inspections or audits (desirable). Skills/knowledge/behavioural competencies: * Strong understanding of GxP principles and quality system processes. * Excellent documentation and technical writing skills. * Ability to manage multiple complaints simultaneously while meeting regulatory timelines. * Strong attention to detail and a structured, risk‑based approach to problem solving. * Effective communication and stakeholder‑management skills. Work Location: * 2 days a week in our brand new Porto or Cambridge office WHY US? An exciting job opportunity awaits you! MoonLake is a dynamic and innovative company pushing the boundaries of possibility, and we are looking for passionate individuals to join our stellar team. What we offer: Learning Environment: An opportunity to learn and grow alongside experienced professionals in a supportive and innovative biotech environment. Impactful Work: Contribute to ground-breaking projects that have the potential to transform global healthcare. Flexibility and Balance: Work remotely/hybrid, enjoying a healthy work-life balance while making meaningful contributions to our team. Career Growth: A clear path for career progression, with the chance to take on more responsibilities as you develop your skills. Our Core Values We look for potential MoonLakers that embody our three core values that drive our pursuit of excellence:  We do Stellar Science: We aspire to create novel therapies that elevate treatment horizons, with innovative science, and high quality, always. We go beyond: We aspire to be positively disruptive in our field, and bold in the way we challenge the norms and each other. We unlock value: We aspire to create long-term value for investors and communities.