Sr. Security Risk Management Analyst

Brak informacji o wynagrodzeniu

SeniorZdalnie·LondynFull-time

#479336·Dodano 3 dni temu·0

Źródło: Kraken

Aplikuj teraz

Tech Stack / Keywords

NIST CSFISO 27005PCI DSSDoCRAAuditBoardArcherOneTrustServiceNow GRCSQLTableau

Podsumowanie oferty

Conduct security risk assessments and support the execution and maturation of Kraken’s Security Risk Management program as part of the Security Governance, Risk, and Compliance (SecGRC) team. The role includes risk analysis, reporting, and developing scalable program workflows for a crypto platform.

Wymagania

5+ years of experience in information security risk management, cybersecurity governance, or GRC.
Hands-on experience conducting risk assessments and owning findings documentation.
Working knowledge of risk management frameworks such as NIST CSF, ISO 27005, PCI DSS, or DoCRA.
Ability to build repeatable, structured, and scalable processes.
Data analysis skills, including cleaning, interpreting, and presenting risk data clearly and accurately.
Experience contributing to KRI tracking and risk reporting for internal stakeholders.
Familiarity with GRC tools such as AuditBoard, Archer, OneTrust, or ServiceNow GRC.
Proficiency in Google Workspace.
Excellent written communication skills.
Self-directed and comfortable operating in ambiguity.
Bachelor's degree or above in IT, Cybersecurity, Business Administration, Engineering, or a related field.

Nice to have:

Experience with SQL and/or Tableau.
CISM, CRISC, or ISO 27001 credentials.
Experience in fintech or regulated industries.

Obowiązki

Execute security risk assessments end to end, including scoping, data gathering, analysis, documenting findings, and communicating results to stakeholders.
Develop and refine risk assessment templates, workflows, and process guides.
Maintain risk registers and track risks through mitigation, remediation, or acceptance workflows.
Build and maintain Key Risk Indicators (KRI) tracking and risk reporting outputs.
Partner with Vulnerability Management, Application Security, and Blue Team to gather relevant data and incorporate operational findings into assessments.
Identify opportunities to streamline and automate risk processes and recommend them to program leadership.
Document and maintain risk program standards, procedures, and guidance materials.
Collaborate with Compliance, Internal Audit, Engineering, and Legal to contextualize and action risk findings.
Support audit preparedness activities and risk-related reporting.

Inne informacje

Candidates may be asked to complete job-related skills or work-style assessments as part of the hiring process.

Kraken

29 aktywnych ofert

Zobacz wszystkie oferty

Aplikuj teraz