Remote-First Security GRC Lead M&A Integration

Kraken International; United States; Remote; USD 180,000 - 240,000; Full time

Job summary

Kraken is seeking a Security GRC Lead to own governance, risk, and compliance across acquisitions. You will map controls, define remediation milestones, and coordinate with the M&A Technology Team to migrate or uplift acquired entities under our central program.

You will lead remediation, evidence collection, and external-audit preparation while maintaining policy coverage across entities and reporting to Security GRC leadership.

Qualifications

• Security governance, IT risk, and compliance experience in fintech or financial services.
• Onboarding acquired companies into an existing controls or compliance program.
• SOX/ICFR ITGC knowledge and evidence collection fundamentals.
• Experience with ISO 27001, SOC 1, SOC 2, or PCI DSS and cross-framework mapping.
• Ability to translate control gaps into risk language for deal teams and executives.
• Strong PM skills and cross-functional collaboration across security and deal teams.

Responsibilities

• Review diligence posture and provide clear read on integration costs in control terms.
• Map acquired controls to Payward framework and external standards.
• Define remediation milestones with owners and dates, prioritizing high risk.
• Track remediation cadence and report to Security GRC leadership and M&A Technology Team.
• Prepare acquired entities for external audit scope and evidence collection.
• Hand over matured entities to central GRC coverage and onboard vendors as needed.

Skills

Security governance

IT risk

Compliance

Onboarding acquired company

SOX/ICFR ITGC

Control mapping

Project management

Stakeholder communication

Education

CISA

CRISC

CISM

CISSP

ISO 27001 Lead Implementer

Job description

Kraken is seeking a Security GRC Lead to own governance, risk, and compliance across acquisitions. You will map controls, define remediation milestones, and coordinate with the M&A Technology Team to migrate or uplift acquired entities under our central program.

You will lead remediation, evidence collection, and external-audit preparation while maintaining policy coverage across entities and reporting to Security GRC leadership.