Salary not listed
Security GRC Analyst, Mergers & Acquisitions
OtherRemote — United Kingdom, Brazil, United Arab Emirates, Ireland, Peru, Sweden, Colombia, Argentina, Romania, Cyprus, Switzerland, Portugal, Lithuania, South Africa, Czech Republic, Canada, Hungary, Mexico, Chile, Poland, Spain, Bulgaria
Published on 2026-11-12
These details were extracted automatically from the original listing. They may not be complete or fully up to date — it's worth checking the original job post.
About this role
Own the security governance, risk, and compliance onboarding process for Payward acquisitions. Assess acquired companies, map their controls to Payward and applicable external frameworks, and drive remediation or integration into the central program.
About the company
Kraken is a leading cryptocurrency exchange that provides a platform for buying, selling, and trading a diverse range of digital assets. The company focuses on compliance, security, and innovative financial solutions to serve both individual and institutional clients.
The team
Security & IT; Security & Risk Management
What you'll do
- Assess acquisition targets’ security posture during diligence or immediately after close.
- Map acquired-company controls to Payward’s framework and applicable external frameworks.
- Score control maturity and create risk-prioritized remediation milestones.
- Track remediation, escalate material or overdue risks, and prepare proposed risk acceptances.
- Prepare acquired entities for external audits and support audit fieldwork.
- Maintain acquired-entity risks in the enterprise risk register and report progress.
- Develop entity-specific policy coverage and document handover to central GRC.
- Feed recurring findings into diligence and document a repeatable onboarding process.
What we're looking for
- 5–7+ years in security governance, IT risk, or compliance.
- Experience in regulated financial services, fintech, or virtual asset environments.
- Direct experience onboarding an acquired company into an existing controls or compliance program.
- Working knowledge of SOX/ICFR IT general controls and auditor evidence requirements.
- Experience with at least two of ISO 27001, SOC 1, SOC 2, and PCI DSS, including control mapping.
- Hands-on ability to assess controls, gather evidence, and close gaps.
- Strong risk judgment, project management, and cross-functional communication skills.
Nice to have
- CISA, CRISC, CISM, CISSP, or ISO 27001 Lead Implementer certification.
- M&A or post-merger technology integration experience.
- Familiarity with PKM.