FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates extensive experience in building and maintaining enterprise risk programs, with a strong focus on information security compliance, regulatory frameworks, and risk management. Proven ability to drive security culture and policy development across diverse teams while managing external vendor relationships and compliance audits.
Highest-signal resume keywords
Information Security ComplianceSOC 2 Audit Cycle ManagementISO 27001 ImplementationGRC Automation PlatformsCloud Security Environments
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Risk ManagementCompliance FrameworksIncident Response FrameworkPolicy WritingVendor Risk ManagementEvidence CollectionSecurity Controls IntegrationBusiness Continuity PlanningDisaster Recovery Program DesignRegulatory Compliance
Soft Skills
CollaborationLeadershipCommunicationProblem-SolvingProactive Security Culture Building
Tools & Technologies
AWSGCPAzureVantaDrata
Certifications & Qualifications
Cloud+CySA+CISSPCISM
Industry Keywords
FintechCrypto InfrastructureB2B SaaSDigital AssetsBlockchain TechnologiesSmart Contract SecurityGENIUS ActMiCADORADeFi
Tech Stack
Tools & technologiesAWSAzureCloudGoogle Cloud Platform
About the role
Key responsibilities & impact- Build M0’s enterprise risk program from scratch, covering security, operational, regulatory, and counterparty risk
- Maintain the risk register, annual assessments, scenario analyses, and escalation framework across all entities
- Own the information security compliance posture across SOC 2, ISO 27001, and other applicable frameworks
- Drive policy writing, auditor coordination, vendor risk, access reviews, and third-party SaaS vendor evaluations
- Design and maintain the incident response framework, ISMS documentation, and security policies
- Own external security vendor relationships and facilitate tabletop exercises covering incident response, business continuity, and disaster recovery
- Drive selection of a security advisory firm for on-call support
- Serve as primary contact for institutional partner security due diligence and inbound security questionnaires
- Build and maintain reusable documentation for partner requests
- Coordinate with Senior Counsel on information security representations in commercial agreements
- Design and own the security awareness training program
- Build a proactive security culture across engineering, operations, legal, and business teams
- Work across engineering, product, legal, business development, and operations, reporting to the Deputy COO
Requirements
What you’ll need- 7–10 years of experience in information security, risk, GRC, or compliance operations
- Meaningful ownership experience, preferably in fintech, crypto infrastructure, or B2B SaaS
- Track record of building a compliance certification program from scratch
- In-depth knowledge of compliance and regulatory frameworks
- Hands-on end-to-end ownership of a full SOC 2 audit cycle
- ISO 27001 implementation and maintenance experience
- Hands-on experience with GRC automation platforms such as Vanta, Drata, or equivalent
- Experience with cloud security environments, AWS preferred
- BCP/DR program design experience
- Experience managing external audit relationships, penetration testing firms, and compliance vendors
- Experience with evidence collection and report production
- Working understanding of AWS, GCP, and Azure
- Experience embedding security controls into DevOps workflows and IaaS deployments
- Preferred certifications: Cloud+, CySA+, CISSP, or CISM
- Ability to work multiple days a week in the main hub office in NYC
- Passion for or strong interest in crypto, blockchain technologies, and DeFi
- Familiarity with digital assets, stablecoins, or blockchain infrastructure, including smart contract security risk and on-chain monitoring tools is a nice to have
- Familiarity with GENIUS Act, MiCA, DORA, or other emerging digital asset and financial services regulatory frameworks is a nice to have
- Prior experience operating across a multi-entity structure is a plus
Benefits
Comp & perks- Equity/token grant
- Flexibility to work remotely or from hubs in NYC or Berlin
- Comprehensive healthcare insurance coverage
- Wellbeing allowance
- Gym membership
- Top-notch IT equipment / customizable IT setup
- Annual professional development budget
- Opportunities to participate in conferences
- On-site company events worldwide