83K–167K USD / year
Security GRC Analyst, Mergers & Acquisitions
OtherRemote — United States
Published on 2026-11-12
These details were extracted automatically from the original listing. They may not be complete or fully up to date — it's worth checking the original job post.
About this role
Own the security governance, risk, and compliance onboarding of acquired companies across Payward. Assess security posture, map controls to company and external frameworks, and drive risk-based remediation through audit readiness or handover to central GRC.
About the company
Kraken is a leading cryptocurrency exchange that provides a platform for buying, selling, and trading a diverse range of digital assets. The company focuses on compliance, security, and innovative financial solutions to serve both individual and institutional clients.
The team
Security & Risk Management; works closely with the M&A Technology Team and Security GRC leadership.
What you'll do
- Assess acquisition targets against Payward’s security baseline during diligence or after close
- Map acquired-company controls to Payward and applicable external frameworks
- Set and track risk-prioritized remediation milestones; escalate material or overdue risks
- Prepare acquired entities for external audits and support evidence collection and walkthroughs
- Record acquired-entity risks in the enterprise risk register and maintain policy coverage
- Recommend full platform migration or steady-state coverage, and document handover to central GRC
- Integrate acquired-company vendors into Payward’s third-party risk program
- Document a repeatable acquisition security onboarding process
What we're looking for
- 5–7+ years in security governance, IT risk, or compliance, including regulated financial services, fintech, or virtual assets
- Direct experience onboarding an acquired company into an existing security controls or compliance program
- Working knowledge of SOX/ICFR IT general controls and external audit evidence
- Experience with at least two of ISO 27001, SOC 1, SOC 2, and PCI DSS, including control mapping
- Ability to assess control maturity and deliver practical remediation plans hands-on
- Strong risk judgment, project management, and communication across distributed, cross-functional teams
Nice to have
- CISA, CRISC, CISM, CISSP, or ISO 27001 Lead Implementer certification
- M&A or post-merger technology integration experience
- Familiarity with PKM
Benefits
- Equity
- Bonus
- Wellness allowance
- Medical, dental, and vision coverage
- 401(k)