Deputy Regional Information Security Officer

November 7

Apply Now

Receive Emails with Similar Jobs

Kraken Digital Asset Exchange

WebsiteLinkedInAll Job Openings

Crypto • Finance • Fintech

Kraken Digital Asset Exchange is a cryptocurrency platform that facilitates the buying and selling of over 200 cryptocurrencies, including Bitcoin, Ethereum, and many others. Founded in 2011, Kraken provides a comprehensive suite of features for both beginner and advanced traders, such as advanced trading interfaces and margin trading. The platform emphasizes industry-leading security, deep liquidity, and 24/7 customer support, making it a trusted choice for users worldwide. Kraken caters to individual investors as well as institutional clients, offering services like OTC trading and custody. The company is committed to transparency with its proof of reserves and mission-driven values. Kraken operates globally, supporting clients in over 190 countries, with a quarterly trading volume exceeding $207 billion. However, users are advised of the high risk of crypto investments and the lack of regulation in some jurisdictions.

1001 - 5000 employees

Founded 2011

₿ Crypto

💸 Finance

💳 Fintech

📋 Description

• Serve as the senior information security officer for appointed entities, with accountability for ICT and resilience oversight • Prepare board and committee reporting on security, risk, and regulatory compliance • Support audits, inspections, and regulatory interactions with authorities • Oversee ICT and security risk assessments, control implementation, and remediation tracking • Maintain entity-level policies aligned with DORA, MiCA, and applicable regulations • Coordinate control testing and documentation with global security and compliance teams • Manage regulatory classification and reporting of ICT-related incidents • Maintain documentation and controls for outsourcing and vendor risk • Lead BIAs, critical function mapping, and continuity planning • Coordinate continuity and recovery testing aligned with regulatory requirements • Ensure oversight of ICT third parties and intra-group outsourcing arrangements • Act as the key contact between entity-level stakeholders and the RISO Lead • Ensure local implementation of group frameworks, policies, and resilience standards • Represent entity priorities in group-led initiatives and forums

🎯 Requirements

• 5+ years’ experience in security governance, resilience, or compliance in regulated environments • Deep understanding of EU regulations (DORA) and security frameworks (ISO27001) • Proven experience conducting risk assessments, BIAs, and resilience planning in a regulated financial services or fintech setting • Familiarity with ICT outsourcing and third-party risk management in a group structure • Ability to understand technical systems and the business processes they support, and synthesize the corresponding risks and controls • Project management skills, with the ability to work collaboratively with cross-functional teams • Certifications such as CISSP, CISM, CRISC, CISA, or equivalent preferred

🏖️ Benefits

• Health insurance • Flexible work arrangements • Professional development