Senior Security Risk Manager – Remote Impact Leader

Kraken International; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Kraken is seeking a Senior Risk Analyst to join its SecGRC team in a fully remote capacity based in the United States. You will conduct end-to-end risk assessments, maintain risk registers, and develop KRIs in partnership with technical teams and leadership.

You will apply frameworks like NIST CSF, ISO 27005, and PCI DSS, build repeatable processes, and communicate complex risk insights clearly. Fintech experience and strong data skills are pluses.

Qualifications

• 5+ years of experience in information security risk management, cybersecurity governance, or GRC.
• Hands-on risk assessments and owning findings documentation.
• Strong knowledge of risk frameworks (NIST CSF, ISO 27005, PCI DSS, or DoCRA).
• Ability to build repeatable, structured, scalable processes.
• Strong data analysis to interpret and present risk data clearly.
• Experience contributing to KRI tracking and risk reporting for internal stakeholders.
• Familiarity with GRC tools such as AuditBoard, Archer, OneTrust, or ServiceNow GRC.
• Proficient in Google Workspace; SQL and Tableau a strong plus.
• Excellent written communication and deliverables quality.
• Self-directed and comfortable operating in ambiguity; capable of taking direction.
• Bachelor’s degree or above in IT, Cybersecurity, Business Admin, Engineering, or related field.
• CISM, CRISC, or ISO 27001 credentials a plus; fintech/regulatory experience preferred.

Responsibilities

• Execute security risk assessments end-to-end with leadership-aligned methodology.
• Refine risk assessment templates, workflows, and process guides for consistency and scalability.
• Maintain risk registers and track mitigation progress through workflows.
• Assist in building and reporting KRIs for senior leadership.
• Collaborate with Vulnerability Management, Application Security, and Blue Team.
• Identify opportunities to streamline risk processes and present to leadership.
• Contribute to documentation and upkeep of risk program standards and guidance.
• Coordinate with Compliance, Internal Audit, Engineering, and Legal to contextualize findings.
• Support audit preparedness activities and risk reporting when directed.

Skills

Information security risk management

Risk assessment

Data analysis

Written communication

Self-directed

Ambiguity tolerance

Education

Bachelor's degree or above

Tools

AuditBoard

Archer

OneTrust

ServiceNow GRC

Google Workspace

SQL

Tableau

Job description

Kraken is seeking a Senior Risk Analyst to join its SecGRC team in a fully remote capacity based in the United States. You will conduct end-to-end risk assessments, maintain risk registers, and develop KRIs in partnership with technical teams and leadership.

You will apply frameworks like NIST CSF, ISO 27005, and PCI DSS, build repeatable processes, and communicate complex risk insights clearly. Fintech experience and strong data skills are pluses.