GRC Lead

Blockdaemon is looking for a talented GRC Lead Analyst that is an innovative thinker who is excited to help scale one of the largest decentralized blockchain infrastructure platforms in the world. You will be the thought leader in ensuring appropriate security controls and compliance requirements are implemented across Blockdaemon’s systems and work closely with our Security, SRE, IT and DevOps teams to drive security audits and lead all GRC efforts. 

Position Overview:

• Lead evidence collection and documentation for known policy frameworks such as:
  • ISO27001
  • SOC 2 Type 2
  • PCI/DSS
  • GDPR, CCPA
• Work with Security, SRE, IT and DevOps to identify processes, procedures, guidelines and frameworks
• Continuously monitor for controls and gaps within processes and technology configurations to identify gapsbetween company processes and frameworks;
• Generate,  innovate, and maintain policies used by the organization;
• Educate staff on compliant practices and processes;
• Conduct risk assessments against products, features, datasets, applications, and third party vendors;
• Support vendor due-diligence process and help lead third party risk management program;
• Participate in disaster recovery and business continuity planning;
• Conduct gap assessments to validate compliance on an ongoing basis;
• Stay up to date on regulatory concerns and changing security landscape and information technology.

Required Experience:

• 5+ years in supporting compliance, risk, security, and IT operations
• Experience developing, championing and managing internal compliance programs
• Familiarity with multiple technology backbones and related supporting infrastructure
• Excellent knowledge of Data Privacy (i.e. GDPR, CCPA) and implementing data protection controls
• Experience managing processes and programs leveraging Security frameworks (i.e. NIST, ISO) and Security Management frameworks (i.e. ISO27001, SOC 2)
• Familiarity with Atlassian Suite and Confluence
• Innovative thinking and leadership with an ability to lead and motivate cross-functional, interdisciplinary teams
• Ability and willingness to work in a rapidly evolving regulatory environment
• Comfort of working in a fully remote environment

#LI Remote