Digital Trust and Resilience Engineer (Security Governance)

About the role

As a Digital Trust and Resilience Engineer at Crypto, you will play a critical role in maintaining security compliance and conducting risk assessments. Your responsibilities will involve coordinating audits for various certifications and ensuring regulatory readiness across global markets.

You will work alongside a diverse and experienced Security Team dedicated to user security and privacy. Success in this role means effectively managing compliance training programs, automating workflows, and driving process improvements to enhance operational efficiency.

The salary range reflects the level of expertise required for the role.

Skills that matter here

• information security: This role requires a solid foundation in information security to manage compliance and risk assessments.
• IT audit: Experience in IT audits is essential for conducting internal and external audits for various certifications.
• IT risk management: You will engage in risk management activities to assess and mitigate potential security threats.
• ISO certifications: Knowledge of ISO certifications is crucial for maintaining the necessary compliance standards.
• compliance training: You will run compliance training programs to ensure a globally aware workforce.
• evidence collection automation: Hands-on experience with automation tools will help drive efficiency in compliance workflows.

Who this role suits

• A professional with 2-5 years of experience in information security or IT audits.
• Someone who is detail-oriented and capable of managing multiple compliance projects.
• A candidate who thrives in a collaborative environment and values continuous improvement.
• An individual with a proactive approach to identifying process improvements and enhancing operational efficiency.

From the employer

• Coordinate and perform annual IT internal audits and external audits for ISO and SOC 2 certifications across global markets, ensuring certifications are maintained to support customer and partner onboarding and regulatory audit readiness
• Run global, regulator-mandated employee security awareness and compliance training campaigns, including tracking, reporting, and continuous improvement
• Automate evidence collection and compliance workflows to drive efficiency gains and scale operations in response to growing regulatory demands
• Participate in internal security and privacy assessments, external audits, compliance certifications, and risk management activities
• Provide complete and accurate responses to internal and third-party enquiries on security compliance
• Perform periodic technical, organizational, and third-party risk and control assessments, and manage remediation activities to completion
• Design and maintain control frameworks required to comply with international standards and local regulations across all operating jurisdictions
• Identify and drive process improvements to streamline global security compliance operations and protect team capacity

• At least 2-5 years of experience in information security, privacy, IT audit, or IT risk management
• Demonstrated experience conducting IT internal and/or external audits, including ISO 27001, ISO 27701, ISO 22301, ISO 42001, SOC 1, SOC 2, PCI-DSS, SOX, cloud technologies, and data protection or equivalent certifications and regulations
• Experience running compliance training programs and reporting for a global workforce
• Hands-on experience with evidence collection automation or compliance workflow AI tooling is a strong advantage
• Experience working with external auditors and/or regulators