Security GRC Analyst

About the role

As a Security GRC Analyst at Blockchain, you will be responsible for overseeing security controls related to applications and ensuring compliance with regulatory standards. Your work will involve designing policies, conducting audits, and maintaining a risk register to track remediation actions.

You will be part of a team that plays a crucial role in safeguarding the company's operations and reputation in the fast-paced crypto industry. Success in this role means effectively managing risks and ensuring that Blockchain maintains its trusted status among millions of users.

The salary range for this role is between $75,000 and $125,000, depending on experience.

Skills that matter here

• IT risk: This role requires a good understanding of IT risk areas to identify and mitigate potential threats.
• Infrastructure security: Knowledge of infrastructure security is essential for overseeing security controls.
• Risk management: You will implement and maintain a risk register as part of your responsibilities.
• Audit: Conducting internal and external audits is a key part of ensuring compliance.
• Security certifications: Experience with certifications such as ISO, SOC, and PCI is necessary for this position.
• Compliance: You will design policies to ensure adherence to regulatory requirements.

Who this role suits

• A strategic thinker who can foresee potential risks and compliance implications.
• Someone with a background in audit and security certifications.
• An individual who communicates effectively and can engage with internal stakeholders.
• A proactive team player who is comfortable working in a hybrid environment.

From the employer

WHAT YOU WILL DO

• Oversee execution and completion of applications related security controls ensuring effectiveness.
• Design, create and share policies, standards and procedures to ensure demonstrable regulatory /legal control. Communicate changes to internal stakeholders.
• Conduct preliminary self-assessment control tests of the applicable controls.
• Track and document remediation actions as result of audit findings.
• Host internal/external IT audits including walkthroughs, retaining test evidence for in scope assets and tracking action plans to either remediate or mitigate potential risk exposure findings.
• Conduct the quarterly User Access reviews process including information gathering, management responses tracking, and results review to follow through on corrective actions.
• Develop, implement and maintain a risk register. Contribute results to the corporate dashboard.
• Participate in new tools/partners/investors due diligences.
• Have an active participation in Digital projects and perform other activities assigned by the Manager.

WHAT YOU WILL NEED

• Forward-looking and strategic minded, with an eye to understanding potential risks, legal and compliance implications.
• Good knowledge of IT risk areas including regulatory, operational, information and energy industry specific.
• Good overall knowledge of application and infrastructure security control mechanisms.
• Advanced command of the English language.
• 2+ years experience in audit and security certifications such as ISO, SOC and PCI.
• Education: Four-year college degree (or equivalent).

COMPENSATION & PERKS

• Competitive full-time salary based on experience and meaningful equity in an industry-leading company.
• This is a role based in our Palermo office, with a mandatory in-office presence four days per week.
• The opportunity to be a key player and build your career at a rapidly expanding, global technology company in an exciting, emerging industry.
• Performance-based bonuses.
• Apple equipment provided by the company.
• Work from Anywhere Policy: You can work remotely from anywhere in the world for up to 20 days per year.