Senior Security Engineer, Governance Risk and Compliance
You'll operate at the fast-moving frontier of the crypto ecosystem, where trust, speed, and ironclad security are paramount. As a sharp, highly autonomous Senior Engineer in GRC, you'll love the details, anticipate gaps before dashboards turn red, and use human judgment to steer modern, tech-forward security frameworks. You'll balance real risk mitigation against empty paperwork, maintaining certifications, running vulnerability management programs, and owning policy, vendor risk, data protection, and business continuity programs.
Responsibilities
- Maintain ISO 27001 certification and prepare for SOC 2 Type 1 and 2
- Manage auditor relationships and own evidence collection in Vanta
- Own the vulnerability management SLA layer including weekly dashboards, breach escalation, and exception tracking
- Provide monthly leadership view on vulnerability management
- Own policy lifecycle including annual reviews, new policies, training rollout, attestation tracking, and exception requests
- Manage people-ops security controls including onboarding/offboarding evidence, access reviews, security awareness training, and background-check tracking
- Partner with HR on security workflow and own the auditable artifact
- Maintain vendor inventory and conduct pre-procurement assessments and annual reassessments
- Maintain the risk register and run quarterly risk reviews
- Manage DLP policy and tuning and data-classification programs
- Partner with Legal on PDPA compliance
- Own the business continuity and disaster recovery program including documentation, drills, and post-exercise improvements
Requirements
- 3–5 years in security or GRC program management, ideally at a fintech that grew through early stages
- Hands-on experience running ISO 27001 and SOC 2 audits end-to-end, including auditor management
- Deep fluency in Vanta (or Drata, with willingness to switch)
- Confident representing the security program to security teams both technically and as a trust signal
- Strong written and verbal communication
- Sound judgment on when a control gap is real risk vs. paperwork, and ability to escalate to the right audience quickly
- Strong interest in Cryptocurrency, Blockchain, Fintech, or Finance/Trading
- Proficient in English communication skill
Benefits
- MacBook or high-end laptop for working
- Full coverage of social insurance
- Premium health care for you and your family members
- Full 100% salary during probationary period
- Professional, friendly, well-equipped workspace
- Extensive on job training