GRC Expert

Fireblocks; Berlin; Vor Ort; EUR 90.000 - 150.000; Vollzeit

Zusammenfassung

Fireblocks is seeking an experienced EU Governance, Risk and Compliance (GRC) expert to lead regulatory alignment with DORA and MiCA in the European Union. You will drive security and compliance programs, acting as the main liaison with European customers on compliance matters and collaborating with cross-functional teams to embed regulatory controls into operations.

Reporting to the GRC Director, you will develop policies, conduct risk assessments, and stay ahead of evolving EU regulations.

Qualifikationen

• 8+ years in cybersecurity or GRC with EU regulation experience.
• Deep knowledge of DORA, MiCA, GDPR, MaRisk, TIBER-EU.
• Experience guiding security and GRC programs with customers and internal teams.

Aufgaben

• Lead development and execution of compliance strategy for DORA and MiCA.
• Perform gap analyses and risk assessments across security and resilience.
• Develop policies, procedures, and controls to meet EU requirements.
• Be primary EU customer contact on security matters and audits.
• Collaborate with teams to embed regulatory initiatives into operations.
• Identify, assess, and remediate regulatory risks to stay aligned.
• Stay updated on EU regulatory developments and provide insights.
• Educate teams on DORA, MiCA, and related standards.
• Plan annual work program and budget for compliance activities.
• Report to GRC leadership to align with business objectives.

Kenntnisse

Regulatory compliance

Security governance

Risk assessment

Project management

Stakeholder engagement

Communication skills

Regulatory liaison

Ausbildung

CISM, CRISC, CISSP certifications

Tools

DORA frameworks

MiCA frameworks

GDPR/MaRisk/TIBER-EU

ISO/NIST/CIS standards

Jobbeschreibung

The world of digital assets is accelerating in speed, magnitude, and complexity, opening the door to new ways for leveraging the blockchain. Fireblocks’ platform and network provide the simplest and most secure way for companies to work with digital assets and is trusted by some of the largest financial institutions, banks, globally-recognized brands, and Web3 companies in the world, including BNY Mellon, BNP Paribas, ANZ Bank, Revolut, and thousands more.

The Role

We are looking for a passionate and experienced EU Governance, Risk, and Compliance (GRC) expert to lead our company’s efforts in aligning with the Digital Operational Resilience Act (DORA) and Markets in Crypto-Assets Regulation (MiCA) in the European Union. This role is critical in driving our security and compliance programs, ensuring they not only meet regulatory standards but also enhance trust and confidence among our customers and stakeholders.

As the EU GRC Manager, you will spearhead the implementation of security frameworks that align with DORA and MiCA, act as the primary liaison with our European customers on compliance matters, and collaborate with cross-functional teams to embed regulatory compliance into our operations.

Reporting line: GRC Director.

What You Will Do

• Lead the development and execution of the company’s compliance strategy for DORA and MiCA regulations.
• Conduct gap analyses and risk assessments to identify areas of improvement in security, operational resilience, and compliance processes.
• Develop and maintain policies, procedures, and controls to align with EU regulatory requirements.
• Act as a primary point of contact for EU customers on security matters and manage operations related to EU customer audits, due diligence queries, security questionnaires, etc., while demonstrating our commitment to regulatory adherence and security excellence.
• Collaborate with internal teams to ensure compliance initiatives are seamlessly integrated into business processes.
• Ensure timely identification, assessment, and remediation of risks to maintain continuous alignment with regulatory requirements.
• Stay up to date with the evolving EU regulatory landscape, constantly research and explore various approaches and solutions in the market, and provide proactive insights to the business.
• Educate and train internal teams on DORA, MiCA and other related regulations and compliance standards to foster a culture of awareness and accountability.
• Plan an annual work program and budget, including internal and external activities, events, training, development, etc.
• Report to senior and executive management within Fireblocks to ensure alignment with business objectives.

Qualifications

• Minimum of 8+ years of experience in cybersecurity or GRC, with at least 5 years experience in EU regulations in a senior role.
• Proven experience in understanding and navigating security and GRC programs, working with various legal, compliance, GRC and security teams both externally with customers and internally.
• In-depth knowledge of EU regulatory frameworks such as DORA, MiCA, GDPR, MaRisk, TIBER-EU etc.
• Strong understanding of industry best practices, frameworks, standards and certifications such as SOC 2, ISO, NIST, CIS etc.
• Visionary and innovation-driven, capable of driving and executing security and compliance programs in complex, fast-paced organizations.
• Exceptional communication, collaboration, and interpersonal skills, with the ability to engage both technical and non-technical audiences.
• Strong analytical and problem-solving skills, with the ability to manage multiple projects simultaneously and meet tight deadlines.

Preferred Qualifications

• Background in the financial/digital assets sector.
• Good technological understanding and familiarity with product development practices.
• CISM, CRISC, CISSP or other cyber security management or risk management certifications.