Sr. Security Risk Management Analyst

Kraken’s world-class Security Team is growing. As we continue to scale and mature our information technology controls program, we are seeking a senior professional with a strong background in risk management to help build and operate a program designed for enterprise scale.

Kraken is seeking a Senior Risk Analyst to join the Security Governance, Risk, and Compliance (SecGRC) team. Reporting to the Senior Manager of Security Risk Management, this role is a key contributor to the execution and maturation of Kraken's Security Risk Management program. You'll conduct rigorous risk assessments, produce high-quality analysis, and help build the operational infrastructure that makes the program run — all in close partnership with program leadership. This role offers the opportunity to make a meaningful and lasting impact both within Kraken and across the broader industry.

The ideal candidate is deeply analytical, process-minded, and energized by turning ambiguous risk signals into clear, repeatable, and scalable workflows. Entrepreneurial spirit and comfort with iterating quickly is a must. This is a fully remote role.

The opportunity

• Execute security risk assessments end-to-end — scoping, data gathering, analysis, findings documentation, and communicating results to stakeholders — in alignment with program methodology set by leadership

• Support the development and continuous refinement of risk assessment templates, workflows, and process guides that make the program consistent and scalable

• Maintain risk registers and ensure identified risks are tracked accurately and progressing through mitigation, remediation, or acceptance workflows

• Assist in building and maintaining Key Risk Indicators (KRI) tracking and risk reporting outputs, translating raw data into clear, well-structured deliverables for review by senior leadership

• Partner with technical teams including Vulnerability Management, Application Security, and Blue Team to gather risk-relevant data and incorporate operational findings into assessment work

• Identify opportunities to streamline and automate risk processes and bring those recommendations to program leadership for prioritization

• Contribute to the documentation and upkeep of risk program standards, procedures, and guidance materials

• Collaborate with cross-functional teams including Compliance, Internal Audit, Engineering, and Legal to ensure risk findings are well-contextualized and properly actioned

• Support audit preparedness activities and risk-related reporting as directed by program leadership

What you bring

• 5+ years of experience in information security risk management, cybersecurity governance, or GRC

• Hands-on experience conducting risk assessments and owning findings documentation — not just supporting assessments, but running them

• Strong working knowledge of risk management frameworks such as NIST CSF, ISO 27005, PCI DSS, or DoCRA

• Demonstrated ability to build repeatable processes — you've taken something ad hoc and made it structured and scalable

• Strong data analysis skills; able to clean, interpret, and present risk data clearly and accurately

• Experience contributing to KRI tracking and risk reporting for internal stakeholder audiences

• Familiarity with GRC tools such as AuditBoard, Archer, OneTrust, or ServiceNow GRC

• Proficient in Google Workspace; SQL and/or Tableau experience a strong plus

• Excellent written communication — your deliverables are clear, well-organized, and don't require heavy editing

• Self-directed and comfortable operating in ambiguity; you take direction well and run with it

• Bachelor's degree or above in IT, Cybersecurity, Business Administration, Engineering, or a related field

• CISM, CRISC, or ISO 27001 credentials a plus; experience in fintech or regulated industries preferred

Stay connected

Follow us on X

Learn on the Kraken Blog

Connect on LinkedIn

Candidate Privacy Notice