Sr. Security Risk Management Analyst
Payward, Inc. is the parent company and operating platform behind Kraken and a portfolio spanning trading, custody, payments, lending, tokenized assets, onchain finance, and benchmarks.
Funding history
Investors
Projects
About Payward, Inc.
Payward operates unified financial infrastructure across crypto and traditional markets, including shared liquidity, risk and margin systems, collateral and settlement, compliance, and licensing. Its first-party portfolio includes Kraken, Kraken Pro, NinjaTrader, Breakout, xStocks, Payward Services, CF Benchmarks, Reap, Krak, Kraken Prime, Kraken OTC, Kraken Custody, and Bitnomial.
Skills
Candidate Availability
About the Role
You will run security risk assessments end-to-end, from scoping and data gathering to analysis, documentation and communicating results. You will help refine templates and workflows, maintain risk registers, build KRI tracking and reporting, and partner with technical and cross-functional teams. You will also look for ways to automate risk processes and support audit preparedness.
Requirements
- 5+ years in information security risk management, cybersecurity governance, or GRC
- Hands-on experience conducting risk assessments and owning findings documentation
- Working knowledge of risk frameworks such as NIST CSF, ISO 27005, PCI DSS, or DoCRA
- Ability to build repeatable processes
- Strong data analysis skills
- Experience with KRI tracking and risk reporting
- Familiarity with GRC tools such as AuditBoard, Archer, OneTrust, or ServiceNow GRC
- Proficient in Google Workspace; SQL and/or Tableau a plus
- Excellent written communication
- Bachelor's degree or above in IT, Cybersecurity, Business Administration, Engineering, or related field
Responsibilities
- Execute security risk assessments end-to-end
- Develop and refine risk assessment templates, workflows, and process guides
- Maintain risk registers and track risks through mitigation, remediation, or acceptance
- Build and maintain KRI tracking and risk reporting outputs
- Partner with Vulnerability Management, Application Security, and Blue Team to gather risk data
- Identify opportunities to streamline and automate risk processes
- Document risk program standards, procedures, and guidance
- Collaborate with Compliance, Internal Audit, Engineering, and Legal
- Support audit preparedness and risk reporting
Benefits
- Equity
- Bonus
- Wellness allowance
- Medical, dental, vision and 401(k) (US only)
