Senior Security & Risk Leader - Fintech (Remote US)

MLabs Ltd; New York, Northern (NY, KY); Ibrido; USD 200.000 - 250.000; Tempo pieno

Vantaggi offerti da questo lavoro

Equity/token grant participation

Hub offices NYC/Berlin

Healthcare & wellbeing

IT hardware allowance

Learning & development budget

Descrizione del lavoro

MLabs Ltd seeks a Head of Security & Risk to build the information security and enterprise risk program from the ground up. This IC role reports to the Deputy COO and will own ERM, ISMS, and incident response in collaboration with engineering, product, legal, and operations.

The candidate should have 7–10 years in information security, risk management, GRC, or compliance, with hands-on SOC 2 and ISO 27001 work, plus experience with Vanta/Drata and AWS. NYC on-site is required several days weekly.

Competenze

• 7–10 years in information security, risk management, or compliance.
• Proven hands-on experience building SOC 2 audits and ISO 27001.
• Experience with GRC automation platforms (Vanta, Drata) and AWS.
• Vendor and audit management experience end-to-end.
• Willingness to work on-site in NYC multiple days per week.

Mansioni

• Build and own enterprise risk management program from scratch.
• Lead information security compliance and certifications (SOC 2, ISO 27001).
• Design and maintain ISMS, policies, and incident response frameworks.
• Manage partner information security due diligence and documentation.
• Promote security awareness and a proactive security culture.

Conoscenze

Information security

Risk management

GRC

Audit coordination

Vendor management

Strumenti

Vanta

Drata

AWS

Descrizione del lavoro

MLabs Ltd seeks a Head of Security & Risk to build the information security and enterprise risk program from the ground up. This IC role reports to the Deputy COO and will own ERM, ISMS, and incident response in collaboration with engineering, product, legal, and operations.

The candidate should have 7–10 years in information security, risk management, GRC, or compliance, with hands-on SOC 2 and ISO 27001 work, plus experience with Vanta/Drata and AWS. NYC on-site is required several days weekly.