Security GRC Analyst – Mergers & Acquisitions

🔥 1 hour ago

🇬🇧 United Kingdom – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🎲 Risk

👻 Ghost score 14%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.Why this score:

• Just posted.
• Jobs at this company usually fill in 42 days.
• No salary listed.

Apply Now

Find Similar Remote Jobs

Kraken Digital Asset Exchange

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2011

₿ Crypto

💸 Finance

💳 Fintech

Crypto • Finance • Fintech

Kraken Digital Asset Exchange is a cryptocurrency platform that facilitates the buying and selling of over 200 cryptocurrencies, including Bitcoin, Ethereum, and many others. Founded in 2011, Kraken provides a comprehensive suite of features for both beginner and advanced traders, such as advanced trading interfaces and margin trading. The platform emphasizes industry-leading security, deep liquidity, and 24/7 customer support, making it a trusted choice for users worldwide. Kraken caters to individual investors as well as institutional clients, offering services like OTC trading and custody. The company is committed to transparency with its proof of reserves and mission-driven values. Kraken operates globally, supporting clients in over 190 countries, with a quarterly trading volume exceeding $207 billion. However, users are advised of the high risk of crypto investments and the lack of regulation in some jurisdictions.

📋 Description

• Own security governance, risk, and compliance across Payward acquisitions • Assess acquisition targets against Payward’s security baseline during diligence or immediately post-close • Map acquired-company controls to Payward’s framework and applicable external frameworks • Score entity-level control maturity and document scoring rationale • Define and sequence risk-based remediation milestones with dates, owners, and risk reductions • Track remediation to closure and escalate overdue or material risks • Recommend full platform migration or an absorbable steady-state maturity endpoint • Load acquired-entity risks into and maintain the enterprise risk register • Prepare acquired entities for external audit scope, including evidence collection and walkthrough support • Serve as Security GRC contact for acquired-company leadership, finance, and internal audit • Maintain entity-specific policy coverage and policy libraries • Feed recurring findings into future diligence processes • Document a repeatable onboarding process • Prepare entities for external audit inclusion and support fieldwork • Hand entities over to central GRC coverage with documented handover • Integrate third parties and vendors into Payward

🎯 Requirements

• 5-7+ years in security governance, IT risk, or compliance, including regulated financial services, fintech, or virtual asset environments • Direct experience onboarding an acquired company into an existing controls or compliance program • Working knowledge of SOX/ICFR IT general controls and external-audit evidence requirements • Experience with at least two of ISO 27001, SOC 1, SOC 2, and PCI DSS, including mapping controls across frameworks • Ability to assess control maturity and set remediation plans • Hands-on delivery, including writing scope, collecting evidence, and closing gaps • Sound judgment on priorities and escalation of leadership decisions • Ability to build working relationships with IAM, infrastructure, and engineering control owners • Ability to translate control gaps into actionable risk language • Strong project management across cross-functional, distributed teams • Preferred: CISA, CRISC, CISM, CISSP, or ISO 27001 Lead Implementer • Preferred: M&A or post-merger technology integration experience • Preferred: familiarity with PKM

🏖️ Benefits

• Remote-first, international team • Dogfooding a Kraken product is required once hired • Equal opportunity employment • Job-related skills or work-style assessments applied consistently • Ongoing application acceptance unless a deadline is stated

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume