Logo

Senior Analyst, Security Compliance

Kraken
Western Europe
Northern Europe
+2 more
Full time
Remote

Overview

Department

IT

Job type

Full time

Compensation

Salary not specified

Location

Western Europe

Company size

Mature [ 50+ employess ]

Resume Assistance

See how well your resume matches this job role with our AI-powered score. By uploading your resume, you agree to our Terms of Service

Ready to apply?

You're one step away - it takes less than a minute to upload your resume

Maintain and improve Kraken's global security posture by leading technical controls advisory and managing compliance assessments. Develop and implement AI-powered automations for compliance tasks.

Requirements

  • 7+ years in security engineering or technical external audit/advisory, including hands-on experience with industry frameworks (e.g. ISO 27001, SOC 2, PCI DSS, FedRAMP, NIST).
  • Strong long-form and asynchronous writing skills for a fully remote, globally distributed team.
  • Built and/or made substantial contributions to a common controls framework.
  • Knowledge of infrastructure as code, CI/CD, orchestration tools, and private key management.
  • Familiarity with security capabilities for major cloud service providers (e.g. AWS, Azure, GCP).
  • Ability to white-board architectures and technical process flows.
  • Communicate limitations and implementation specifics of technical controls with ease.
  • Responsibilities

  • Maintain a systems-level understanding of our global, large-scale technology infrastructure.
  • Lead technical controls advisory for engineering, security, IT and beyond—keeping our security posture audit-ready and globally compliant across all products and regions.
  • Plan and lead ISO 27001:2022, SOC 2 Type II, PCI DSS v4, SOX assessments with external assessors and regulators globally.
  • Develop and sustain expert-level knowledge on regulations impacting Security, IT, Engineering
  • Prepare the program for emerging frameworks and new products or jurisdictions without slowing product velocity.
  • Write, update and enact policies and procedures capturing security requirements.
  • Design and deploy AI-powered automations that turn manual compliance tasks into real-time, self-service workflows.
  • © All rights reserved.