Exodus

Security Engineer

• Exodus is hiring a Security GRC Lead to strengthen trust, reduce risk, and safeguard our reputation by scaling governance, risk, and compliance programs.
• Define and execute the enterprise Security GRC strategy, ensuring alignment with business objectives and regulatory obligations.
• Lead and represent Exodus Security in regulatory, audit, and assurance engagements, acting as the primary interface with regulators, auditors, and senior stakeholders.
• Own the security risk management framework and processes, ensuring risk identification, assessment, reporting, and mitigation activities are embedded into business operations.
• Oversee compliance program delivery for relevant frameworks and regulations, including SOC 2, SOX, GDPR, DORA, and other applicable standards.
• Oversee third-party security risk management, from onboarding due diligence to continuous monitoring.
• Partner with the CSO to advise the executive team and Board on security risk posture, compliance readiness, and regulatory trends.

GRC Lead – Security

• Own and evolve Exodus product security strategy, embedding security into the full product lifecycle from ideation and design to deployment and maintenance.
• Build, mentor, and scale a high-performing team that blends technical expertise with strong developer and business empathy.
• Partner with engineering, product, and design to integrate secure development safe UX/UI practices into product development without slowing delivery.
• Drive strategic initiatives for secure SDLC, security tooling adoption, developer enablement, and measurable risk reduction.
• Work with cross-functional partners, including Legal and Compliance, to ensure product designs and processes meet industry and regulatory requirements, enabling Exodus to operate securely and compliantly in all markets.
• Lead product security incident response and manage Exodus’s vulnerability disclosure and bug bounty programs, acting as the technical authority to contain, resolve, and learn from vulnerabilities while fostering productive engagement with the security community.
• Play an active role in shaping product strategy to ensure security is a differentiator and enabler for business growth.

GRC Lead – Security

Head of Product Security