Senior Analyst, Security Compliance
Payward, Inc. is a global financial infrastructure company and the parent organization behind Kraken. It provides trading, custody, payments, lending, staking, tokenized assets, derivatives, and market data infrastructure to consumers, professional traders, institutions, enterprises, fintechs, banks, exchanges, asset managers, and onchain platforms.
Funding history
Investors
Projects
About Payward, Inc.
Payward, Inc. operates a unified financial infrastructure platform powering a portfolio of products including Kraken, NinjaTrader, Breakout, xStocks, CF Benchmarks, and Payward Services. Its shared architecture provides global liquidity, risk and margin management, collateral and settlement, compliance and licensing, and operational infrastructure across crypto, tokenized assets, and traditional markets. Through Payward Services, the company offers APIs and infrastructure for crypto trading, custody, on/off-ramps, tokenized equities, derivatives, staking and yield, payments, and benchmark data. Payward operates across more than 190 jurisdictions and serves consumers, professional traders, institutional investors, enterprises, fintechs, banks, exchanges, asset managers, and DeFi/onchain protocols.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will lead SOC 1 and SOC 2 examinations, support SOX planning and execution, assess IT and security control design and effectiveness, drive remediation, mature ITGCs and ITACs, develop auditor-ready documentation, coordinate with auditors and control owners, and improve evidence collection through automation.
Requirements
- 5+ years of experience in external IT audit, technology risk assurance, or advisory
- Experience with ICFR and SOX 404 frameworks
- Experience with control design and operating effectiveness testing
- Experience at a Big 4 or large public accounting firm, or with external auditors
- Experience leading compliance and audit initiatives from planning through close
- Experience assessing hybrid and cloud environments including IaaS, PaaS, and SaaS
- Experience with access management, change management, and logging or monitoring controls
- Experience with risk and control frameworks such as NIST, ISO 27001, or COBIT is a plus
- CPA, CISA, CRISC, or similar certification is a plus
Responsibilities
- Lead and manage SOC 1 and SOC 2 examinations under AICPA standards
- Support end-to-end SOX planning and execution
- Scope IT systems and prepare for audits
- Develop and deliver training for control owners
- Translate SOX and audit requirements into scalable controls
- Lead security and IT control gap assessments
- Evaluate control design and operating effectiveness
- Drive remediation through completion
- Mature ITGCs and ITACs
- Oversee audit initiative quality and execution
- Assess risk and guide teams through audit and compliance matters
- Perform impact assessments for SOX control deficiencies
- Design risk-based remediation plans
- Implement and enhance controls monitoring
- Identify systemic program challenges and recommend process improvements
- Develop and maintain data flow diagrams and process flowcharts
- Work with internal and external auditors
- Support audit evidence collection and automation initiatives
Benefits
- Equity
- Bonus program
- Wellness allowance
- Medical insurance
- Dental insurance
- Vision insurance
- 401(k)