Digital Trust & Resilience Analyst: AI-Driven Compliance

Crypto.com; Abbeyville (CO); On-site; USD 90,000 - 140,000; Full time

Job summary

Crypto.com is seeking a Digital Trust and Resilience Senior Analyst to lead technology risk assessment and security compliance across our global operations. You will coordinate annual IT internal and external audits, including ISO and SOC 2, to support onboarding, regulatory readiness, and partner requirements.

In addition, you will drive mandatory security awareness training, automate evidence collection, and provide guidance on risk, controls, and regulatory relationships.

Qualifications

• 2–5 years of experience in information security, privacy, IT audit, or IT risk management.
• Experience conducting IT internal and external audits, including ISO 27001, SOC 2, PCI-DSS.
• Experience running compliance training programs and reporting for a global workforce.
• Hands-on experience with evidence collection automation or AI-enabled compliance tooling.

Responsibilities

• Coordinate and perform annual IT internal and external audits for ISO and SOC 2 across global markets.
• Lead regulatory training campaigns and track, report, and improve results.
• Automate evidence collection and compliance workflows to scale operations.
• Support security and privacy assessments, audits, and risk management activities.
• Provide responses to internal and third-party security compliance inquiries.
• Design and maintain control frameworks to meet international standards.
• Drive process improvements to streamline global security compliance.
• Collaborate with external auditors and regulators as needed.

Skills

Information security

Privacy

IT audit

IT risk management

Compliance training

Automation

External auditors

Tools

AI tooling

Automation tools

Job description

Crypto.com is seeking a Digital Trust and Resilience Senior Analyst to lead technology risk assessment and security compliance across our global operations. You will coordinate annual IT internal and external audits, including ISO and SOC 2, to support onboarding, regulatory readiness, and partner requirements.

In addition, you will drive mandatory security awareness training, automate evidence collection, and provide guidance on risk, controls, and regulatory relationships.