Senior Analyst, Security Compliance

Position Overview

• Location Type: Remote
• Employment Type: Full-Time
• Salary: (Not provided in the description)
• Description: Kraken is building the future of crypto and blockchain technology. This role focuses on building a robust Web3 controls program for a rapidly growing, globally distributed company. The team is responsible for maintaining a systems-level understanding of the company's technology infrastructure, leading technical controls advisory, and preparing the program for emerging frameworks and regulations.

Requirements

• Experience: 5–7 years in security engineering or technical external audit/advisory.
• Frameworks: Strong knowledge of industry frameworks (e.g., ISO 27001, SOC 2, PCI DSS, FedRAMp, NIST).
• Writing Skills: Excellent long-form and asynchronous writing skills – crucial for a remote, globally distributed team.
• Controls Framework: Experience building and contributing to a common controls framework.
• Technical Skills:
  • Knowledge of infrastructure as code, CI/CD, orchestration tools, and private key management.
  • Familiarity with security capabilities for major cloud service providers (e.g., AWS, Azure, GCP).
• Communication: Ability to white-board architectures and technical process flows.

Responsibilities

• Maintain a systems-level understanding of the company’s global, large-scale technology infrastructure.
• Lead technical controls advisory for engineering, security, IT, and beyond – keeping the security posture audit-ready and globally compliant across all products and regions.
• Plan and lead ISO 27001:2022, SOC 2 Type II, PCI DSS v4, and SOX assessments with external assessors and regulators globally.
• Develop and sustain expert-level knowledge on regulations impacting Security, IT, and Engineering.
• Prepare the program for emerging frameworks and new products or jurisdictions without slowing product velocity.
• Write, update, and enact policies and procedures capturing security requirements.
• Design and deploy AI-powered automations that turn manual compliance tasks into real-time, self-service workflows.
• Partner with domain experts in existing IT audit programs and enterprise infrastructure.
• Collaborate with teams including Security, Information Technology, Product, and Engineering.

Application Instructions

• Familiarize yourself with the Kraken Culture page: [Kraken Culture Page - Not provided in the description]
• Learn how to create a Kraken account: [Kraken Account Creation - Not provided in the description]

Company Information

• Company: Kraken
• Mission: To accelerate the global adoption of crypto, so that everyone can achieve financial freedom and inclusion.
• Values: Crypto conviction, mission-focused, industry pioneers.
• Products: Kraken Pro, Desktop, Wallet, and Kraken Futures.
• Remote: Fully remote – Krakenites in 70+ countries.
• Web3 Involvement: Founding member of several new Web3 standards organizations.