Senior Security Program Manager

Keyrock; Barcelona; Remote; EUR 90,000 - 120,000; Full time

Job summary

Keyrock is seeking a Senior Security Program Manager to drive the most critical security initiatives in a fast-moving trading environment. You will build structure, visibility, and predictable delivery across programs, partnering with Engineering, IT, Risk/Compliance, and leadership to reduce risk while enabling business velocity.

This role requires translating security strategy into measurable roadmaps, outcomes, and strong cross-functional coordination to ensure security is embedded in daily

Qualifications

• 7+ years in security program or technical PM roles.
• Experience running cross-functional programs across engineering & operations.
• Fluent in translating risk into clear priorities and roadmaps.

Responsibilities

• Lead multi-quarter security program roadmaps with KPIs.
• Coordinate governance, reporting, and executive updates.
• Improve incident readiness and operational resilience.
• Collaborate across security, engineering, and business teams.

Skills

Security program management

Cross-functional leadership

Cloud/Infrastructure

Identity & access

Vulnerability management

Security monitoring

Incident response

Technical communication

Tools

GRC tools

Job description

About Keyrock

Since our beginnings in 2017, we've grown to be a leading change-maker in the digital asset space, renowned for our partnerships and innovation.

Today, we rock with over 200 team members around the world. Our diverse team hails from 42 nationalities, with backgrounds ranging from DeFi natives to PhDs. Predominantly remote, we have hubs in London, Brussels, Singapore and Paris, and host regular online and offline hangouts to keep the crew tight.

We are trading on more than 80 exchanges, and working with a wide array of asset issuers. As a well-established market maker, our distinctive expertise led us to expand rapidly. Today, our services span market making, options trading, high-frequency trading, OTC, and DeFi trading desks as well as digital asset management. Keyrock is looking to expand and establish itself as a full-service financial institution through both organic innovation and inorganic growth.

But we’re more than a service provider. We’re an initiator. We're pioneers in adopting the Rust Development language for our algorithmic trading systems, and champions of its use in the industry. We support the growth of Web3 startups through our Accelerator Program. We upgrade ecosystems by injecting liquidity into promising DeFi, RWA, and NFT protocols. And we push the industry's progress with our research and governance initiatives.

At Keyrock, we're not just envisioning the future of digital assets. We're actively building it.

Role Summary

As a Senior Security Program Manager, you will drive execution of Keyrock’s highest-priority security initiatives across a fast-moving, always-on trading environment. You’ll build structure, visibility, and predictable delivery across security programs—partnering with Engineering, Infrastructure/Cloud, Trading/Quant Engineering, IT, Risk/Compliance, and leadership to reduce risk while enabling business velocity.

This role is ideal for someone who can translate security strategy into delivery: clear roadmaps, measurable outcomes, and strong cross-functional coordination.

What You’ll Do

Program leadership & delivery

Own a portfolio of security programs (planning, resourcing, milestones, dependencies, risk/issue management, and outcomes). Create and maintain multi-quarter roadmaps aligned to Keyrock’s business and operating model across venues and services (CEX/DEX and liquidity services). Establish governance and operating cadence: steering meetings, status reporting, program reviews, and executive updates. Support the CISO in delivering firmwide initiatives.

Security governance, risk, & control initiatives

Partnerwith Security and Engineering teams to drive key initiatives such as: access governance, secrets management, vulnerability remediation, security logging/monitoring improvements, endpoint/security baseline, and secure SDLC enablement. Help mature control coverage and evidence for internal/external assuranceneeds (as applicable in a financial-services context). Partnerwith the Directorof GRC to supportGRC and audit initiatives.

Incident readiness & operational resilience

Partnerwith Security Operations to improve incident preparedness through playbooks, tabletop exercises, lessons learned, and operational runbooks—ensuring security response stays effective in a high-availability trading environment.

Cross-functional influence

Actas the “glue” across technicalandbusiness stakeholders—clarifying ownership, unblocking delivery, and keeping programsmoving withcrispcommunication. Buildlightweight, scalable processes that improvesecurity consistency without slowing teams.

What Success Looks Like (first 6–12 Months)

Aclearlyprioritizedsecurityprogram roadmapwithmeasurableKPIsandpredictable execution. Improvedsecurityreadynessfor key business areas, aligned with Keyrock’s activities (market making, OTC, options, treasury). Higher stakeholder confidence via clear reporting, risk transparency, and consistent program delivery.

Minimum Qualifications

7+ years in security program management / technical program management / security operations program delivery. Demonstrated experience running cross-functional programs across engineering and operations (scope, schedule, risks, dependencies). Strong technical fluency in cloud/infra, identity/access, vulnerability management, security monitoring, and incident processes. Excellent written/verbal communication with the ability to translate complex risk into clear priorities.

Preferred Qualifications

Experience in fintech, trading, payments, or digital assets, especially environments requiring high uptime and rapid execution. Familiarity with security frameworks (NIST CSF, ISO 27001) and audit/assurance concepts. Experience supporting security programs that intersect with financial integrity domains (e.g., AML/CFT awareness is a plus given Keyrock’s financial-services context). Relevant certifications (e.g., CISM, CISSP, CISA, CRISC, PMP) or equivalent demonstrated expertise.