decircle

Security Engineer

• Build M0’s enterprise risk program from scratch, covering security, operational, regulatory, and counterparty risk
• Maintain the risk register, annual assessments, scenario analyses, and escalation framework across all entities
• Own the information security compliance posture across SOC 2, ISO 27001, and other applicable frameworks
• Drive policy writing, auditor coordination, vendor risk, access reviews, and third-party SaaS vendor evaluations
• Design and maintain the incident response framework, ISMS documentation, and security policies
• Own external security vendor relationships and facilitate tabletop exercises covering incident response, business continuity, and disaster recovery
• Drive selection of a security advisory firm for on-call support
• Serve as primary contact for institutional partner security due diligence and inbound security questionnaires
• Build and maintain reusable documentation for partner requests
• Coordinate with Senior Counsel on information security representations in commercial agreements
• Design and own the security awareness training program
• Build a proactive security culture across engineering, operations, legal, and business teams
• Work across engineering, product, legal, business development, and operations, reporting to the Deputy COO

Explore Head of Security and Risk at decircle. Review requirements and application details.