Remote opportunity at
Kraken Digital Asset ExchangeSr. Security Risk Management Analyst
Kraken Digital Asset Exchange is seeking a Sr. Security Risk Management Analyst to join its Security Governance, Risk, and Compliance team. Reporting to the Senior Manager…
Career Tools
About This Role
Kraken Digital Asset Exchange is seeking a Sr. Security Risk Management Analyst to join its Security Governance, Risk, and Compliance team. Reporting to the Senior Manager of Security Risk Management, this remote position involves performing end-to-end security risk assessments, maintaining risk registers, and helping to mature the enterprise risk management program. The ideal professional is analytical, comfortable with ambiguity, and capable of converting unstructured risk signals into repeatable, scalable workflows.…
Job Description
Kraken Digital Asset Exchange is seeking a Sr. Security Risk Management Analyst to join its Security Governance, Risk, and Compliance team. Reporting to the Senior Manager of Security Risk Management, this remote position involves performing end-to-end security risk assessments, maintaining risk registers, and helping to mature the enterprise risk management program. The ideal professional is analytical, comfortable with ambiguity, and capable of converting unstructured risk signals into repeatable, scalable workflows.
Founded in 2011, Kraken operates globally as a long-standing crypto platform trusted by millions of retail and institutional users. The Security Team is expanding to scale its IT controls program, and this contributor will collaborate closely with technical and cross-functional partners including Engineering, Compliance, Legal, and Internal Audit. Key duties include tracking Key Risk Indicators, managing mitigation progress, and aiding in audit readiness initiatives.
Responsibilities
- Conduct comprehensive security risk assessments from scoping through results communication
- Refine risk assessment templates, workflows, and process guides
- Track identified risks through mitigation, remediation, or acceptance workflows
- Assist in building Key Risk Indicators tracking and reporting outputs for senior leadership
- Partner with Vulnerability Management, Application Security, and Blue Teams to gather risk data
- Identify opportunities to streamline and automate risk processes
- Contribute to documentation and upkeep of risk program standards and procedures
- Collaborate with Compliance, Internal Audit, Engineering, and Legal teams
- Support audit preparedness activities and risk reporting
Requirements
- Five or more years of experience in cybersecurity governance, information security risk management, or GRC
- Hands-on experience conducting risk assessments and owning findings documentation
- Working knowledge of risk management frameworks such as NIST CSF, ISO 27005, PCI DSS, or DoCRA
- Experience contributing to Key Risk Indicator tracking and risk reporting
- Familiarity with GRC tools such as AuditBoard, Archer, OneTrust, or ServiceNow GRC
- Proficiency in Google Workspace
- Strong written communication skills and ability to operate in ambiguity
Qualifications
- Bachelor’s degree or higher in IT, Cybersecurity, Business Administration, Engineering, or a related field
- Experience with SQL and/or Tableau
- CISM, CRISC, or ISO 27001 credentials
- Experience working in fintech or regulated industries
Core Skills
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Is this position remote?
Yes, this is a fully remote role.
What is the employment type?
The employment type is full-time.
What salary does this role offer?
The job posting does not specify the salary.
How are applications accepted?
Unless a specific deadline is stated in the posting, applications are accepted on an ongoing basis.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.