Remote Head of Security, Risk & Compliance

OpenKrill; United States; Remote; USD 198,000 - 242,000; Full time

Benefits offered by this job

Health insurance

Wellbeing allowance

Gym membership

Annual development budget

Global flexible work (remote/NYC/Berln

Job summary

M0 is remote with hubs in NYC and Berlin. We are seeking a Head of Security & Risk to build the information security function from the ground up. You will own risk governance, audit-ready processes, and partner due diligence in a highly regulated crypto infra environment.

Reporting to the Deputy COO, you will collaborate with engineering, legal, and product to establish robust security posture, policies, and incident response while driving a culture of proactive security across the organization.

Qualifications

• 7–10 years of information security, risk, GRC, or compliance operations experience.
• Proven ability to build a compliance program from scratch (SOC 2, ISO 27001).
• Hands-on with cloud security, audits, and vendor risk management.

Responsibilities

• Build and own the enterprise risk program across security, operations, and regulatory risk.
• Own the security compliance program, including policy writing and audit readiness.
• Establish security operations framework, incident response, and DR/BCP planning.
• Lead partner security due diligence, document responses for inquiries and contracts.
• Build security awareness and foster a proactive security culture across teams.

Skills

Proactive risk thinker

Organized & process-driven

Ownership & accountability

Excellent communicator

Curiosity about crypto

Tools

Vanta

Drata

AWS

Job description

M0 is remote with hubs in NYC and Berlin. We are seeking a Head of Security & Risk to build the information security function from the ground up. You will own risk governance, audit-ready processes, and partner due diligence in a highly regulated crypto infra environment.

Reporting to the Deputy COO, you will collaborate with engineering, legal, and product to establish robust security posture, policies, and incident response while driving a culture of proactive security across the organization.