Crypto Firm #01
Lead, Security GRC (Compliance) — Stealth Digital Asset Infrastructure Firm 💎
New York | San Francisco | Hybrid (2 days onsite)
We’re scaling a global digital asset infrastructure platform that blends the precision of Wall Street with the innovation of Web3.
Now we’re looking for a Security GRC Lead (Compliance) to own, shape, and enforce the programs that keep this operation bulletproof across every regulatory front.
This is a leadership role with teeth — you’ll have full accountability for the firm’s major compliance programs (PCI, ISO 27001, SOC 2, NYDFS), working directly with execs, auditors, and regulators to ensure we set — not follow — the security bar.
If you live for frameworks, audits, automation, and the satisfaction of passing every test under pressure — you’re exactly who we want.
What You’ll Do
- Own and drive enterprise-wide security compliance programs (PCI, ISO 27001, NYDFS, SOC 2).
- Lead audit readiness and execution across internal and external assessments — no gaps, no surprises.
- Partner with engineering and platform teams to automate evidence collection, enforce policies, and streamline control validation.
- Align compliance objectives with fast-moving product and infrastructure teams without slowing innovation.
- Present risk posture, compliance status, and audit results to executive leadership and board-level audiences.
- Build and mentor a high-performing GRC team focused on operational excellence and accountability.
- Champion continuous improvement — finding smarter, scalable ways to prove compliance and strengthen controls.
What You Bring
- 8+ years in cybersecurity compliance / risk management within regulated or financial environments.
- Proven mastery of frameworks — NYDFS, PCI, ISO 27001, SOC 2, and related security standards.
- Strong background in audit management, risk assessments, and control testing.
- Big 4 or equivalent consulting experience highly preferred.
- Hands-on experience with GRC tooling (AuditBoard, Archer, or equivalent) and evidence automation.
- Executive communication skills — able to translate compliance metrics into business impact.
- Leadership presence with the ability to guide teams, influence decisions, and drive enterprise alignment.
Why This Hits Different
Base $130K–$185K + bonus + equity + full benefits (health, 401K match, PTO, parental leave).
You’ll be the architect of compliance inside a global crypto-fintech powerhouse — shaping the frameworks that govern billions in digital asset operations.

