{"id":4178769,"url":"https://alion.io/job/kraken-sr-security-risk-management-analyst-2","title":"Sr. Security Risk Management Analyst","company":{"id":963,"name":"Kraken","domain":"kraken.com","url":"https://alion.io/company/kraken","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"A","score":91,"open_postings":7,"ghost_share":0,"stale_share":0.286,"repost_share":0.143,"time_to_fill_p50_days":42,"computed_at":"2026-11-12T10:38:37Z"}},"role":"Analytics","role_family":"Analytics","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["AE","GB","AR","BR","BG","CA","CO","CY","CZ","HU","IE","MX","PL","RO","ZA","ES","SE","CH","CL","LT","PE","PT"],"hiring_countries_total":22,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Google Workspace","optional":false},{"name":"ISO 27001","optional":false},{"name":"NIST CSF","optional":false},{"name":"PCI DSS","optional":false},{"name":"ServiceNow","optional":false},{"name":"SQL","optional":false}],"status":"live","first_seen_at":"2026-11-12T14:47:01Z","employer_posted_date":"2026-11-12","last_verified_at":"2026-11-12T16:53:25Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Building the Future of Open Finance\nPayward - the parent company behind Kraken, NinjaTrader, Breakout, xStocks, Payward Services and CF Benchmarks - has spent the last 15 years building one of the most modern and globally accessible financial infrastructure platforms in the industry, built to advance an open, global financial system.\nThe team\nFounded in 2011, Kraken is one of the world's longest-standing crypto platforms, trusted by over 10 million individuals and institutions across the globe. It offers spot trading, margin, futures, staking, and OTC services, with products built for both individual investors and institutional clients.\nKraken’s world-class Security Team is growing. As we continue to scale and mature our information technology controls program, we are seeking a senior professional with a strong background in risk management to help build and operate a program designed for enterprise scale.\nKraken is seeking a Senior Risk Analyst to join the Security Governance, Risk, and Compliance (SecGRC) team. Reporting to the Senior Manager of Security Risk Management, this role is a key contributor to the execution and maturation of Kraken's Security Risk Management program. You'll conduct rigorous risk assessments, produce high-quality analysis, and help build the operational infrastructure that makes the program run - all in close partnership with program leadership. This role offers the opportunity to make a meaningful and lasting impact both within Kraken and across the broader industry.\nThe ideal candidate is deeply analytical, process-minded, and energized by turning ambiguous risk signals into clear, repeatable, and scalable workflows. Entrepreneurial spirit and comfort with iterating quickly is a must. This is a fully remote role.\nThe opportunity\nExecute security risk assessments end-to-end - scoping, data gathering, analysis, findings documentation, and communicating results to stakeholders - in alignment with program methodology set by leadership\n\nSupport the development and continuous refinement of risk assessment templates, workflows, and process guides that make the program consistent and scalable\n\nMaintain risk registers and ensure identified risks are tracked accurately and progressing through mitigation, remediation, or acceptance workflows\n\nAssist in building and maintaining Key Risk Indicators (KRI) tracking and risk reporting outputs, translating raw data into clear, well-structured deliverables for review by senior leadership\n\nPartner with technical teams including Vulnerability Management, Application Security, and Blue Team to gather risk-relevant data and incorporate operational findings into assessment work\n\nIdentify opportunities to streamline and automate risk processes and bring those recommendations to program leadership for prioritization\n\nContribute to the documentation and upkeep of risk program standards, procedures, and guidance materials\n\nCollaborate with cross-functional teams including Compliance, Internal Audit, Engineering, and Legal to ensure risk findings are well-contextualized and properly actioned\n\nSupport audit preparedness activities and risk-related reporting as directed by program leadership\n\nWhat you bring\n5+ years of experience in information security risk management, cybersecurity governance, or GRC\n\nHands-on experience conducting risk assessments and owning findings documentation - not just supporting assessments, but running them\n\nStrong working knowledge of risk management frameworks such as NIST CSF, ISO 27005, PCI DSS, or DoCRA\n\nDemonstrated ability to build repeatable processes - you've taken something ad hoc and made it structured and scalable\n\nStrong data analysis skills; able to clean, interpret, and present risk data clearly and accurately\n\nExperience contributing to KRI tracking and risk reporting for internal stakeholder audiences\n\nFamiliarity with GRC tools such as AuditBoard, Archer, OneTrust, or ServiceNow GRC\n\nProficient in Google Workspace; SQL and/or Tableau experience a strong plus\n\nExcellent written communication - your deliverables are clear, well-organized, and don't require heavy editing\n\nSelf-directed and comfortable operating in ambiguity; you take direction well and run with it\n\nBachelor's degree or above in IT, Cybersecurity, Business Administration, Engineering, or a related field\n\nCISM, CRISC, or ISO 27001 credentials a plus; experience in fintech or regulated industries preferred\n\nUnless a specific application deadline is stated in the job posting, applications are accepted on an ongoing basis.\nPlease note, applicants are permitted to redact or remove information on their resume that identifies age, date of birth, or dates of attendance at or graduation from an educational institution.\nWe consider qualified applicants with criminal histories for employment on our team, assessing candidates in a manner consistent with the requirements of the San Francisco Fair Chance Ordinance.\nOur commitment\nPayward is powered by people from around the world and we celebrate the diverse talents, backgrounds, contributions, and unique perspectives that everyone brings to the table. We hire based on merit, seeking out people with the right abilities, knowledge, and skills for the job. We encourage you to apply for roles where you don't fully meet the listed requirements, especially if you're passionate or knowledgeable about crypto.\nWe may ask candidates to complete job-related skills or work-style assessments as part of our hiring process. These assessments evaluate competencies relevant to the role and are applied consistently across candidates for similar positions. Results are considered alongside experience and interviews, and are not the sole basis for any employment decision.\nAs an equal opportunity employer, we don't tolerate discrimination or harassment of any kind, whether based on race, ethnicity, age, gender identity, citizenship, religion, sexual orientation, disability, pregnancy, veteran status, or any other protected characteristic as outlined by federal, state, or local laws.\nStay connected\nFollow us on X\nLearn on the Kraken Blog\nConnect on LinkedIn\n Candidate Privacy Notice","description_format":"text","description_chars":6172,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United Arab Emirates","iso":"AE","kind":"country"},{"name":"United Kingdom","iso":"GB","kind":"country"},{"name":"Argentina","iso":"AR","kind":"country"},{"name":"Brazil","iso":"BR","kind":"country"},{"name":"Bulgaria","iso":"BG","kind":"country"},{"name":"Canada","iso":"CA","kind":"country"},{"name":"Colombia","iso":"CO","kind":"country"},{"name":"Cyprus","iso":"CY","kind":"country"},{"name":"Czech Republic","iso":"CZ","kind":"country"},{"name":"Hungary","iso":"HU","kind":"country"},{"name":"Ireland","iso":"IE","kind":"country"},{"name":"Mexico","iso":"MX","kind":"country"},{"name":"Poland","iso":"PL","kind":"country"},{"name":"Romania","iso":"RO","kind":"country"},{"name":"South Africa","iso":"ZA","kind":"country"},{"name":"Spain","iso":"ES","kind":"country"},{"name":"Sweden","iso":"SE","kind":"country"},{"name":"Switzerland","iso":"CH","kind":"country"},{"name":"Chile","iso":"CL","kind":"country"},{"name":"Lithuania","iso":"LT","kind":"country"},{"name":"Peru","iso":"PE","kind":"country"},{"name":"Portugal","iso":"PT","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cryptocurrencies","Crypto Exchanges","Mining & Staking","Online Brokerage & Trading Platforms"],"lifecycle":[{"event":"open","at":"2026-11-12T16:53:25Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":42,"reasons":["conf:1","win:early"],"computed_at":"2026-11-12T18:10:42Z"},"pay":null,"html_url":"https://alion.io/job/kraken-sr-security-risk-management-analyst-2","json_url":"https://alion.io/job/kraken-sr-security-risk-management-analyst-2.json","meta":{"generated_at":"2026-11-12T18:10:42Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":38180,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":963},"rest":"https://alion.io/mcp/rest/get_company?id=963"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fkraken-sr-security-risk-management-analyst-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fkraken-sr-security-risk-management-analyst-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fkraken-sr-security-risk-management-analyst-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/kraken-sr-security-risk-management-analyst-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fkraken-sr-security-risk-management-analyst-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4178769}},{"tool":"search_jobs","arguments":{"company":"kraken.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4178769},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}