Remote Security Risk Manager — Fintech/Crypto

EMCD; United States; Remote; USD 130,000 - 170,000; Full time

Job summary

EMCD is expanding globally and seeks a Security Risk Manager to own the cyber risk program, drive audits, and guide regulatory licensing initiatives across crypto services. You will oversee onboarding risk assessments, maintain risk registers, and report concise, data-driven updates to C-level executives.

The role requires 4+ years in information security risk management within fintech/crypto, strong TPRM experience, and fluency in Russian and English.

Qualifications

• 4+ years in Information Security Risk Management or GRC in fintech/crypto or regulated environments.
• Experience maintaining risk registers and engaging risk owners.
• Practical Third-Party Risk Management (TPRM) experience.
• Knowledge of ISO 27001/27005, NIST CSF, or SP 800-30.
• Experience preparing for SOC 2 or ISO 27001 audits.

Responsibilities

• Conduct information security risk assessments of partners and vendors during onboarding.
• Maintain the IS risk register and track risk treatment plans.
• Lead risk communication with C-level executives.
• Coordinate SOC 2 initiatives and IS track for Type 2 readiness.
• Lead regulatory licensing efforts for IS (VASP, MiCA, DORA).
• Lead Governance & Compliance team planning and KPIs.

Skills

Information Security Risk Management

GRC

Third-Party Risk Management

ISO 27001/27005

NIST CSF

SOC 2 readiness

Regulatory compliance (VASP/MiCA/DORA)

Crypto risk awareness

C-level reporting

Russian language proficiency

English language proficiency

Job description

EMCD is expanding globally and seeks a Security Risk Manager to own the cyber risk program, drive audits, and guide regulatory licensing initiatives across crypto services. You will oversee onboarding risk assessments, maintain risk registers, and report concise, data-driven updates to C-level executives.

The role requires 4+ years in information security risk management within fintech/crypto, strong TPRM experience, and fluency in Russian and English.