Senior Analyst, Security Compliance

Payward is the parent company behind Kraken, NinjaTrader, Breakout, xStocks, Payward Services, and CF Benchmarks. Kraken, founded in 2011, is a crypto platform trusted by over 10 million users globally, offering spot trading, margin, futures, staking, and OTC services for both individual and institutional clients. The Security Team is scaling their information technology controls program to enterprise scale.

• 5+ years experience in external IT audit and/or technology risk assurance or advisory with ownership of complex audits
• Hands-on experience with Internal Controls over Financial Reporting (ICFR), including SOX 404 frameworks, control design, and testing
• Prior experience at a Big 4 or large public accounting firm, or equivalent external audit experience
• Demonstrated ability to lead compliance and audit initiatives end-to-end
• Experience auditing or assessing hybrid and cloud-based environments (IaaS, PaaS, SaaS), including controls over access management, change management, and logging
• Ability to operate autonomously in fast-paced, ambiguous environments
• Strong oral and written communication skills for technical and non-technical stakeholders
• Proven ability to manage multiple priorities and coordinate cross-functional work
• Strong organizational and time management skills with effectiveness in remote or distributed environments

Nice to have:

• Exposure to fintech, payments, crypto, or digital asset business models
• Familiarity with risk and control frameworks (e.g., NIST, ISO 27001, COBIT)
• Professional certifications such as CPA, CISA, or CRISC

• Lead and manage SOC 1 and SOC 2 examinations under AICPA standards, partnering with external auditors and internal teams to design, implement, and improve IT control processes
• Support end-to-end SOX planning and execution, including IT system scoping, audit readiness, and training for control owners
• Act as a trusted advisor to Security, IT, Infrastructure, Engineering, Data, and Finance teams, translating SOX and audit requirements into scalable controls aligned with modern technology stacks
• Lead security and IT control gap assessments, evaluate control design and operating effectiveness, and drive remediation efforts
• Facilitate maturation of IT general controls (ITGCs) and IT application controls (ITACs)
• Oversee execution of audit initiatives, identifying control gaps and assessing risk
• Perform impact assessments for SOX control deficiencies and design remediation plans
• Implement and enhance controls monitoring and defense-in-depth across IT risk areas
• Partner cross-functionally to identify program challenges and recommend process improvements
• Develop and maintain auditor-ready documentation including data flow diagrams and process flowcharts
• Work closely with internal and external auditors to ensure efficient audits
• Support audit evidence collection and continuous improvement initiatives, leveraging automation

Applicants are permitted to remove information on resumes that identifies age, date of birth, or dates of attendance/graduation. The company considers qualified applicants with criminal histories consistent with the San Francisco Fair Chance Ordinance. Equal opportunity employer prohibiting discrimination or harassment based on protected characteristics.