🕒 4 days ago
Manage enterprise patching across Windows, Linux, and macOS using Tanium, improving deployment reliability, remediating vulnerabilities, and tracking compliance with security and regulatory standards.
[Security Compliance] Digital Trust & Resilience Specialist
📅 Sep 9
Information SecurityIT AuditRisk ManagementISO 27001
📜 Description
- Coordinate and perform annual IT internal and external audits for ISO and SOC 2 certifications across global markets.
- Run global employee security awareness and compliance training campaigns, tracking and reporting on effectiveness.
- Automate evidence collection and compliance workflows to improve efficiency and scale operations.
- Participate in security assessments, audits, compliance certifications, and risk management activities.
- Provide accurate responses to internal and third-party inquiries on security compliance.
- Identify and drive process improvements to streamline global security compliance operations.
🛠️ Requirements
- At least 2-5 years of experience in information security, privacy, IT audit, or IT risk management
- Demonstrated experience conducting IT internal and/or external audits, including ISO 27001, ISO 27701, ISO 22301, ISO 42001, SOC 1, SOC 2, PCI-DSS, SOX, cloud technologies, and data protection or equivalent certifications and regulations
- Experience running compliance training programs and reporting for a global workforce
- Hands-on experience with evidence collection automation or compliance workflow AI tooling is a strong advantage
- Experience working with external auditors and/or regulators
- Proficiency in English with the ability to engage overseas counterparts and auditors
- Experience in information security and privacy management in virtual assets, fintech, artificial intelligence (AI), online services, and global platform services
- Relevant certifications, such as CISSP, CRISC, CISM, CISA, ISO 27001 LA, CIPT, CIPP/E, or CIPP/US
- Knowledge of global regulatory frameworks and demonstrated experience managing regulator relationships across jurisdictions, including GDPR, DORA, CFTC, MiCA, HKMA, and HK SFC.
- Experience establishing information security and privacy frameworks to meet local regulatory requirements
Full job description
About the Role
As our Digital Trust and Resilience Specialist you will lead and perform technology risk assessment and security compliance activities central to our global operations. You will coordinate annual IT internal and external audit programs, including ISO and SOC 2 certifications across our key markets. These certifications are critical to accelerating customer onboarding and streamlining annual regulatory audits worldwide. You will also run mandatory employee security awareness training globally, and drive the automation of evidence collection to improve efficiency. In this role, you will identify compliance gaps, support remediations, and provide technical guidance across all business units.
AI is fundamental to how we work. In this position, you will help us build AI automations, workflows, and agents to boost the efficiency of Digital Trust & Resilience operations. You do not need to be an AI researcher. You just need to understand compliance risks and have a drive to learn and apply AI tools.
Our Security Team
At Crypto.com, our dedication to user security is led by our highly experienced Security Team. Comprising an international roster of seasoned cybersecurity experts, our team leads the company's Security, Privacy, and Security Compliance endeavors.
The team includes holders of international patents for technologies integrated in our security architecture. Under the stewardship of a distinguished CISO recognized by the Forbes Technology Council and among the Global Top 100 CISOs, our team has consistently championed industry standards, acquiring certifications like ISO27001, ISO27701, ISO22301, ISO42001, PCI:DSS 3.2.1 (Level 1), NIST Tier 4, and SOC 2 Type II, in addition to the MPI License from Singapore MAS. Our Chief Information Security Officer reports directly to the CEO, underscoring the prioritization of security in our organization's hierarchy.
Our Security Team not only places great emphasis on credentials and expertise but also deeply values hands-on experience, rapid cognition, and dynamic learning. The challenges in the world of crypto are ever-evolving, and as such, our team prides itself on quick adaptability and robust teamwork, ensuring that we stay ahead of potential threats and always safeguard our user base.
#LI-CY2
As our Digital Trust and Resilience Specialist you will lead and perform technology risk assessment and security compliance activities central to our global operations. You will coordinate annual IT internal and external audit programs, including ISO and SOC 2 certifications across our key markets. These certifications are critical to accelerating customer onboarding and streamlining annual regulatory audits worldwide. You will also run mandatory employee security awareness training globally, and drive the automation of evidence collection to improve efficiency. In this role, you will identify compliance gaps, support remediations, and provide technical guidance across all business units.
AI is fundamental to how we work. In this position, you will help us build AI automations, workflows, and agents to boost the efficiency of Digital Trust & Resilience operations. You do not need to be an AI researcher. You just need to understand compliance risks and have a drive to learn and apply AI tools.
Responsibilities:
Requirements & Qualifications:
Preferred:
Similar jobs
Search more Software Engineer jobs
🕒 yesterday
Build AI-powered freight operations tools by combining customer discovery with full-stack development, taking early prototypes into production and shaping the product’s technical direction.
Application Software Engineer, Flight Software
🕒 2 days ago
SpaceX👥 10,000+ employees🏢 Aviation And Aerospace Component Manufacturing🤝 B2B
🕒 2 days ago
Build and own reliable applications that support SpaceX operations, manufacturing, flight, and Starlink, collaborating with engineers to solve user problems and deliver software from design through deployment.
🕒 3 days ago
Build and own features for a high-scale user segmentation system, spanning Ruby on Rails and React development, database query tuning, performance improvements, and reliable production operations.
🕒 3 days ago
Build and own features for Braze’s high-scale user segmentation system, spanning Ruby on Rails and React, while improving performance and cost across data pipelines processing billions of users per day.