Remote Senior Security Compliance Analyst

Kraken; Poland; On-site; PLN 431,000 - 689,000; Full time

Job summary

Kraken is seeking a senior IT audit professional to lead and mature our IT control program in a rapidly evolving Web3 environment. This fully remote role supports Europe-based candidates and aligns with U.S.

business hours, collaborating with Security, IT, Infrastructure, Engineering, Data and Finance. You will own SOC 1 and SOC 2 examinations, plan SOX ICFR scope, and translate regulatory requirements into practical controls.

Qualifications

• 5+ years in external IT audit or technology risk advisory.
• Strong ICFR/SOX 404 experience.
• Big Four or equivalent audit firm experience.
• Ability to work cross-functionally across Finance, Technology, Engineering and Security.
• Experience in regulated environments and with IT controls.

Responsibilities

• Lead and manage SOC 1 and SOC 2 examinations under AICPA standards in a complex tech environment.
• Support end-to-end SOX planning and execution including IT scoping and training for control owners.
• Advise Security, IT, Infrastructure, Engineering, Data and Finance on control design and operation.
• Lead control gap assessments and drive remediation with process owners.
• Mature ITGCs and ITACs while balancing regulatory expectations with product speed.
• Oversee audit initiatives and provide high‑quality, auditable documentation.
• Develop evidence collection processes and leverage automation to improve efficiency.

Skills

External IT audit

IT risk assurance

SOX/ICFR

Cross-functional collaboration

Auditing standards

Education

Big Four experience

Job description

Kraken is seeking a senior IT audit professional to lead and mature our IT control program in a rapidly evolving Web3 environment. This fully remote role supports Europe-based candidates and aligns with U.S.

business hours, collaborating with Security, IT, Infrastructure, Engineering, Data and Finance. You will own SOC 1 and SOC 2 examinations, plan SOX ICFR scope, and translate regulatory requirements into practical controls.