Security GRC Analyst – Mergers & Acquisitions

Kraken Digital Asset Exchange

. Own security governance, risk, and compliance across Payward's acquisitions .

Posted 11/12/2026full-timeRemote • United StatesMid-LevelSenior💰 $83,400 - $166,800 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in security governance, risk management, and compliance within financial services and fintech environments, with a strong focus on integrating acquired entities into existing compliance frameworks. Proficient in assessing control maturity, developing remediation plans, and collaborating with cross-functional teams to ensure effective risk management.

Highest-signal resume keywords

Security GovernanceRisk ManagementCompliance Program IntegrationControl Maturity AssessmentProject Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security GovernanceIT Risk ManagementComplianceControl Environment ReviewRisk Remediation PlanningSOX/ICFR IT General ControlsISO 27001SOC 1SOC 2PCI DSS

Soft Skills

Judgment on PrioritiesRelationship BuildingEscalation of Leadership Decisions

Tools & Technologies

Enterprise Risk RegisterPolicy LibrariesEvidence Collection Tools

Certifications & Qualifications

CISACRISCCISMCISSPISO 27001 Lead Implementer

Industry Keywords

Financial ServicesFintechVirtual Asset EnvironmentsM&A Technology IntegrationExternal Audit

About the role

Key responsibilities & impact

Own security governance, risk, and compliance across Payward's acquisitions
Assess acquisition targets against Payward's security baseline during diligence or immediately post-close
Review target control environments, IAM, infrastructure, third-party dependencies, and audit history
Map acquired-company controls to Payward's framework and applicable external frameworks
Score entity-level control maturity and document scoring rationale
Identify control gaps and define risk-prioritized remediation milestones with dates, owners, and expected risk reduction
Track remediation to closure and escalate overdue or material risks
Prepare proposed risk acceptances with rationale and compensating controls for leadership decisions
Recommend full platform migration or a maturity endpoint the central program can absorb
Load acquired-entity risks into the enterprise risk register and maintain them
Prepare acquired entities for external audit scope, including evidence collection, walkthroughs, and fieldwork support
Serve as Security GRC contact for acquired-entity leadership, finance, and internal audit
Build entity-specific policy libraries where parent policies do not apply
Feed recurring findings into future acquisition diligence
Document a repeatable acquisition onboarding process
Integrate third parties and vendors into Payward
Hand entities over to central GRC coverage with documented transition
Collaborate with M&A Technology, deal sponsors, control owners, external auditors, and Security GRC leadership

Requirements

What you’ll need

5–7+ years in security governance, IT risk, or compliance, including regulated financial services, fintech, or virtual asset environments
Direct experience onboarding an acquired company into an existing controls or compliance program
Working knowledge of SOX/ICFR IT general controls and external-audit evidence requirements
Experience with at least two of ISO 27001, SOC 1, SOC 2, and PCI DSS, including mapping controls across frameworks
Ability to assess control maturity and set remediation plans for teams below Payward's maturity level
Hands-on ability to write scope, collect evidence, and close gaps
Sound judgment on priorities with incomplete information and ability to escalate leadership decisions
Ability to build working relationships with control owners in IAM, infrastructure, and engineering
Ability to translate control gaps into actionable risk language
Strong project management across cross-functional, distributed teams
Preferred: CISA, CRISC, CISM, CISSP, or ISO 27001 Lead Implementer
Preferred: M&A or post-merger technology integration experience
Preferred: familiarity with PKM
Applicants must select the city and country from which they will work
Applicants must disclose whether they need work sponsorship in their location

Benefits

Comp & perks

Equity program
Bonus program
Wellness allowance
Medical benefits
Dental benefits
Vision benefits
401(k)
Remote-first work environment
International team
Ongoing application acceptance when no deadline is stated
Equal opportunity employment
Job-related skills or work-style assessments applied consistently across candidates
Dogfooding Kraken products is required after joining