Technology and Security Risk Director
Core
Lead the Second Line of Defence (2LOD) Technology and Security Risk Management program, providing independent oversight, challenge, and scaling of risk controls for a global crypto exchange.
Role type
Senior IC Technology and Security Risk Manager (2LOD)
Builds
Technology and Security Risk Management program, RCSA processes, KRIs, and GRC systems
Domain
Fintech / Crypto / Cybersecurity
Required skills
Technology Risk oversight, Cybersecurity architecture, Cloud security controls, Threat modeling, Risk Control Self-Assessment (RCSA), Key Risk Indicators (KRIs), Governance Risk and Compliance (GRC), Disaster recovery testing, Regulatory compliance (NIST CSF, ISO 27001, SOC 2, GDPR)
Preferred skills
Fintech or crypto experience, Cloud-native experience, GRC platform experience, CISSP/CCSP/CISA/CISM certifications
Technologies
Cloud platforms, IAM, Cryptographic controls, Network security, Application security, Logging configurations
Responsibilities
Collaborate with stakeholders to identify, assess, and mitigate Technology and Security risks; Provide oversight of Technology and Security Risk incidents; Lead the Technology Risk RCSA process; Support Security KRIs definition and reporting; Advocate for Risk Management frameworks; Stay updated on digital asset regulations
Seniority
Senior, hands-on IC with strategic oversight