Senior Analyst, Security Compliance
Leads SOC 1/2 and SOX compliance, manages IT controls audits, gap assessments, and remediation in a crypto/Web3 environment. Requires 5+ years external IT audit experience, Big 4 background preferred, strong cross-functional collaboration.
The Team
Kraken's Security Compliance team seeks a senior professional with IT controls and external audit expertise to build and operate an enterprise-scale controls program in a Web3 environment. Close partnership with IT, security, engineering, and finance teams in a fast-paced setting. Fully remote role.
The Opportunity
- Lead and manage SOC 1 and SOC 2 examinations under AICPA standards, partnering with auditors and teams to design, implement, and improve IT controls
- Support end-to-end SOX planning and execution, including scoping, readiness, and training for control owners
- Act as trusted advisor translating SOX/audit requirements into scalable controls for modern tech stacks
- Lead control gap assessments, evaluate design/effectiveness, and drive remediation
- Facilitate maturation of ITGCs and ITACs balancing regulation and innovation
- Oversee audit quality, apply judgment to identify gaps and risks
- Perform impact assessments for SOX deficiencies and design remediation plans
- Implement controls monitoring and defense-in-depth across IT risks
- Partner cross-functionally for process improvements
- Develop auditor-ready documentation like data/process flow diagrams
- Work with auditors for efficient audits
- Support evidence collection and automation for efficiency
Security Engineer
Security Engineer focused on security operations, incident response, monitoring/alerting, and securing SaaS applications and infrastructure. Requires Go experience, Elastic Stack, GCP, and on-call rotation participation.
Security Analyst
Security Analyst responsible for managing endpoint security, DLP, SIEM monitoring, incident response, and compliance for a healthcare AI company. Requires 2+ years in security operations or SOC experience.
Senior Security Engineer, Agentic AI
Senior Security Engineer specializing in Agentic AI Security to discover and exploit novel vulnerabilities in agentic AI systems, develop prompt injection attacks, and conduct security assessments of AI pipelines and frameworks.