Security GRC Analyst – Mergers & Acquisitions

🔥 1 minute ago

🇺🇸 United States – Remote

💵 $83.4k - $166.8k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

🎲 Risk

👻 Ghost score 4%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.Why this score:

• Just posted.
• Jobs at this company usually fill in 42 days.

Apply Now

Find Similar Remote Jobs

Kraken Digital Asset Exchange

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2011

₿ Crypto

💸 Finance

💳 Fintech

Crypto • Finance • Fintech

Kraken Digital Asset Exchange is a cryptocurrency platform that facilitates the buying and selling of over 200 cryptocurrencies, including Bitcoin, Ethereum, and many others. Founded in 2011, Kraken provides a comprehensive suite of features for both beginner and advanced traders, such as advanced trading interfaces and margin trading. The platform emphasizes industry-leading security, deep liquidity, and 24/7 customer support, making it a trusted choice for users worldwide. Kraken caters to individual investors as well as institutional clients, offering services like OTC trading and custody. The company is committed to transparency with its proof of reserves and mission-driven values. Kraken operates globally, supporting clients in over 190 countries, with a quarterly trading volume exceeding $207 billion. However, users are advised of the high risk of crypto investments and the lack of regulation in some jurisdictions.

📋 Description

• Own security governance, risk, and compliance across Payward's acquisitions • Assess acquisition targets against Payward's security baseline during diligence or immediately post-close • Review target control environments, IAM, infrastructure, third-party dependencies, and audit history • Map acquired-company controls to Payward's framework and applicable external frameworks • Score entity-level control maturity and document scoring rationale • Identify control gaps and define risk-prioritized remediation milestones with dates, owners, and expected risk reduction • Track remediation to closure and escalate overdue or material risks • Prepare proposed risk acceptances with rationale and compensating controls for leadership decisions • Recommend full platform migration or a maturity endpoint the central program can absorb • Load acquired-entity risks into the enterprise risk register and maintain them • Prepare acquired entities for external audit scope, including evidence collection, walkthroughs, and fieldwork support • Serve as Security GRC contact for acquired-entity leadership, finance, and internal audit • Build entity-specific policy libraries where parent policies do not apply • Feed recurring findings into future acquisition diligence • Document a repeatable acquisition onboarding process • Integrate third parties and vendors into Payward • Hand entities over to central GRC coverage with documented transition • Collaborate with M&A Technology, deal sponsors, control owners, external auditors, and Security GRC leadership

🎯 Requirements

• 5–7+ years in security governance, IT risk, or compliance, including regulated financial services, fintech, or virtual asset environments • Direct experience onboarding an acquired company into an existing controls or compliance program • Working knowledge of SOX/ICFR IT general controls and external-audit evidence requirements • Experience with at least two of ISO 27001, SOC 1, SOC 2, and PCI DSS, including mapping controls across frameworks • Ability to assess control maturity and set remediation plans for teams below Payward's maturity level • Hands-on ability to write scope, collect evidence, and close gaps • Sound judgment on priorities with incomplete information and ability to escalate leadership decisions • Ability to build working relationships with control owners in IAM, infrastructure, and engineering • Ability to translate control gaps into actionable risk language • Strong project management across cross-functional, distributed teams • Preferred: CISA, CRISC, CISM, CISSP, or ISO 27001 Lead Implementer • Preferred: M&A or post-merger technology integration experience • Preferred: familiarity with PKM • Applicants must select the city and country from which they will work • Applicants must disclose whether they need work sponsorship in their location

🏖️ Benefits

• Equity program • Bonus program • Wellness allowance • Medical benefits • Dental benefits • Vision benefits • 401(k) • Remote-first work environment • International team • Ongoing application acceptance when no deadline is stated • Equal opportunity employment • Job-related skills or work-style assessments applied consistently across candidates • Dogfooding Kraken products is required after joining

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume