IT Governance, Risk & Compliance (GRC) Specialist

About the role

Bridge Building S.A. (BBSA) is the Luxembourg regulated entity of Bridge, a Stripe company, operating as an EMI and future CASP. The IT GRC Specialist will act as the bridge between strict European regulations and fast‑moving global engineering, ensuring the platform is compliant, resilient, and audit‑ready.

Key responsibilities

• Maintain and evolve the IT Risk Register and drive local implementation of the DORA framework.
• Draft, review, and update IT policies and procedures to align technical reality with regulatory requirements.
• Support third‑party risk management, including vendor due diligence, SLA monitoring, and oversight of outsourcing arrangements.
• Oversee Identity & Access Governance, conduct user access reviews, and enforce segregation of duties.
• Act as primary liaison for internal audit, prepare regulatory reporting for the CSSF, and monitor GDPR/Data‑Privacy controls.
• Coordinate business continuity and disaster recovery testing and manage the IT incident management process.

Required profile

• Bachelor’s or Master’s degree in Information Systems or a related field.
• Strong understanding of European fintech regulations such as DORA, MiCA, and CSSF requirements.
• Experience translating regulatory requirements into concrete IT controls.
• Ability to work closely with global engineering teams while ensuring local compliance.

Required skills

• DORA framework implementation
• MiCA regulatory knowledge
• ICT risk management
• Identity & Access Governance (IAM)
• GDPR and data‑privacy controls
• Business Continuity Planning (BCP) and Disaster Recovery (DR)
• Incident management and root‑cause analysis
• Third‑party risk management