Senior Engineer, Security Compliance Automation
Twilio
AirflowCloudDockerKubernetesPythonTerraform
Senior Security Compliance Analyst
Coinbase
full-time
Posted on:
Location Type: Remote
Location: Remote • 🇮🇪 Ireland
Visit company websiteSalary
💰 €103,600 per year
Job Level
Senior
About the role
- Lead technical deep dive control assessments into crypto derivatives products
- Assess SOX, SOC 2 and ISO27001 implications of crypto derivatives services
- Translate complex regulatory requirements into actionable engineering and business requirements
- Build close relationships with stakeholder teams
- Lead incident impact analysis procedures for Consumer products
- Provide ongoing reporting to stakeholders and leadership
- Identify opportunities to address systemic program challenges
- Develop and maintain comprehensive control and testing requirement documentation
- Develop creative solutions to prove risk mitigation
- Maintain awareness of international regulation, emerging threats, forecasts, policies, and benchmarks
Requirements
- 6+ years of experience working in a technical controls or GRC engineering function, or equivalent experience
- Familiarity with standards and frameworks e.g. ISO 27001/5, NIST CSF, SOX, SOC, COBIT
- Ability to analyze and map complex, crypto-native technical processes to traditional control objectives
- Comfortable operating on an unpaved road and dealing with ambiguity
- Experience drafting/operationalizing project plans across stakeholders
- Understanding of financial derivatives is essential.
Benefits
- bonus eligibility
- equity eligibility
- medical insurance
- dental insurance
- vision insurance
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard skills
technical controlsGRC engineeringrisk mitigationcontrol assessmentsincident impact analysisdocumentationproject planscrypto derivativesregulatory requirementssystemic program challenges
Soft skills
relationship buildingcommunicationproblem solvinganalytical thinkingadaptabilityleadershipstakeholder managementcreativityoperationalizingambiguity management