Note: The job is a remote job and is open to candidates in USA. Kraken is a leading crypto platform building a modern financial infrastructure. They are seeking a Senior Analyst in Security Compliance to manage IT control processes and collaborate with various teams to ensure audit readiness and compliance in a fast-paced environment.
Responsibilities
- Lead and manage SOC 1 and SOC 2 examinations under AICPA standards in a complex, rapidly evolving technology environment, partnering with external auditors and internal teams to design, implement, and continuously improve IT control processes
- Support end-to-end SOX planning and execution, including IT system scoping, audit readiness, and development and delivery of training for control owners operating in a high-growth, regulated business
- Act as a trusted advisor to Security, IT, Infrastructure, Engineering, Data, and Finance teams, translating SOX and audit requirements into practical, scalable controls aligned with modern technology stacks
- Lead security and IT control gap assessments, evaluate control design and operating effectiveness, and drive remediation efforts through to completion in partnership with control owners
- Facilitate the ongoing maturation of IT general controls (ITGCs) and IT application controls (ITACs), balancing regulatory expectations with the pace of product and platform innovation
- Oversee the quality and execution of audit initiatives, applying strong professional judgment to identify control gaps, assess risk, and guide teams through complex audit and compliance matters
- Perform impact assessments for SOX control deficiencies and design risk-based, pragmatic remediation plans that stand up to auditor scrutiny without slowing the business
- Implement and enhance controls monitoring and defense-in-depth across key IT risk areas to improve audit outcomes and strengthen the overall control environment
- Partner cross-functionally to identify systemic program challenges, recommend process improvements, and drive durable solutions in a scaling organization
- Develop and maintain clear, auditor-ready documentation, including data flow diagrams and process flowcharts for high-risk security and financial processes
- Work closely with internal and external auditors, helping them navigate a sophisticated IT control environment and ensuring efficient, high-quality audits
- Support audit evidence collection and continuous improvement initiatives, including leveraging automation to improve efficiency, consistency, and scalability
Skills
- 5+ years of experience in external IT audit and/or technology risk assurance or advisory, with demonstrated ownership of complex audit requirements
- Strong hands-on experience with Internal Controls over Financial Reporting (ICFR), including SOX 404 frameworks, control design, and operating effectiveness testing
- Prior experience at a Big 4 or other large public accounting firm, or equivalent experience working with external auditors in a highly regulated environment
- Proven ability to lead compliance and audit initiatives end to end, from planning and risk assessment through remediation and audit close
- Experience auditing or assessing hybrid and cloud-based environments (e.g., IaaS, PaaS, SaaS), including access management, change management, and logging/monitoring controls
- Ability to operate autonomously in ambiguous, fast-paced environments, driving outcomes across cross-functional teams with minimal supervision
- Strong oral and written communication skills, with the ability to clearly explain technical concepts to technical and non-technical stakeholders
- Demonstrated ability to manage multiple priorities, coordinate cross-functional work, and hold stakeholders accountable to agreed timelines
- Strong organizational and time management skills, with a high degree of self motivation and effectiveness in a remote or distributed working environment
- Exposure to fintech, payments, crypto, or digital asset business models, an added plus for crypto audit experience
- Familiarity with risk and control frameworks (e.g., NIST, ISO 27001, COBIT) beyond baseline audit requirements
- Professional security management certification such as a Certified Public Accountant (CPA) or Certified Information Systems Auditor (CISA) or Certified in Risk and Information Systems Control (CRISC) other similar credentials, is a huge plus
Benefits
- Offers Equity
- Offers Bonus
- This is a fully remote role.
- Accelerate your technical depth by working in a cutting-edge, modern infrastructure environment, gaining exposure to cloud-native architectures and complex, real-time systems
- Broaden your impact and perspective by collaborating with highly integrated, globally distributed teams and working alongside world-class professionals across engineering, security, and other technical disciplines
- Move beyond “check-the-box” compliance to influence how controls are designed and scaled in a fast-growing, regulated technology business
- Gain meaningful ownership and visibility while helping shape a maturing audit and compliance program in a dynamic, evolving industry
Company Overview