Risk & Controls Manager

Job not on LinkedIn

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $150k - $206k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

🎲 Risk

👻 Ghost score 1%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

MetaMask

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2016

₿ Crypto

🌐 Web 3

💳 Fintech

Crypto • Web 3 • Fintech

MetaMask is a leading self-custodial crypto wallet that serves as a gateway to blockchain applications. Available as a browser extension and mobile app, it enables users to track and manage their web3 assets securely and conveniently. With features such as buying, selling, staking, and bridging crypto tokens, MetaMask empowers over 100 million users worldwide to control their digital assets and interact on the decentralized web with privacy and security.

📋 Description

• Operate the risk register from the Security Programme threat model, including treatment tracking, acceptance decisions, owner follow-up and the exceptions register • Keep the ISMS and security policy library current and draft security standards when commissioned • Run Drata as the control and evidence system, including the Statement of Applicability, framework crosswalk and automation • Run critical control monitoring, health check-ins, drift flags and Drata automation • Maintain evidence for Lead assessments and independent internal audit • Feed threat-assessment findings into the register and confidence ratings • Lead ISO 27001 and SOC 2 audit coordination and preparation, including ISMS readiness, team preparation, management-review packs and customer due-diligence questionnaires • Coordinate the control register for red-team, tabletop and penetration testing • Run security awareness and weekly alerts • Track residual risk, exceptions and gap closure against appetite • Report register state and evidence health to the Lead and Risk Committee • Maintain a current, defensible posture engine and ensure Drata collects evidence continuously

🎯 Requirements

• Hands-on experience running a risk register, control library and audit cycle (ISO 27001 and/or SOC 2) • Comfort with GRC platforms (Drata or equivalent) and turning monitoring into evidence • Proven ability to coordinate audits and customer questionnaires with named control owners • Precise written work; register and Statement of Applicability quality matters • Strong stakeholder management with control owners and auditors • CISA, ISO 27001 Lead Implementer or Auditor, or equivalent professional certification • Applicants may be required to submit to employment, education, criminal record and other background and identity checks • Applications are not considered from candidates based in France, Italy, or Germany

🏖️ Benefits

• Equal opportunity employment • Background and identity verification checks as a condition of employment • Remote-friendly, remote-first work environment