Salary not listed
Sr. Security Risk Management Analyst
OtherRemote — United Kingdom
Published on 2026-11-12
These details were extracted automatically from the original listing. They may not be complete or fully up to date — it's worth checking the original job post.
About this role
Execute and improve Kraken’s security risk management program through end-to-end assessments, risk analysis, and clear reporting. Help build scalable processes and workflows, working with technical and business stakeholders to track and address security risks.
About the company
Kraken is a leading cryptocurrency exchange that provides a platform for buying, selling, and trading a diverse range of digital assets. The company focuses on compliance, security, and innovative financial solutions to serve both individual and institutional clients.
The team
Security Governance, Risk, and Compliance (SecGRC) team, reporting to the Senior Manager of Security Risk Management.
Stack
NIST CSFISO 27005PCI DSSDoCRAAuditBoardArcherOneTrustServiceNow GRC
What you'll do
- Conduct security risk assessments from scoping through findings documentation and stakeholder communication
- Refine assessment templates, workflows, and process guides
- Maintain risk registers and track mitigation, remediation, and acceptance
- Support KRI tracking and prepare risk reports for senior leadership
- Partner with security, engineering, compliance, audit, and legal teams
- Identify opportunities to streamline and automate risk processes
- Maintain risk program standards and support audit preparedness
What we're looking for
- 5+ years in information security risk management, cybersecurity governance, or GRC
- Hands-on experience conducting end-to-end risk assessments and documenting findings
- Working knowledge of security risk frameworks such as NIST CSF, ISO 27005, PCI DSS, or DoCRA
- Experience creating repeatable, scalable processes from ad hoc activities
- Strong data analysis and written communication skills
- Experience contributing to KRI tracking and internal risk reporting
- Bachelor’s degree or higher in a related field
- Self-directed and comfortable working in ambiguity
Nice to have
- Experience with GRC tools such as AuditBoard, Archer, OneTrust, or ServiceNow GRC
- SQL or Tableau experience
- CISM, CRISC, or ISO 27001 credentials
- Fintech, financial services, or other regulated-industry experience