Sr. Security Risk Management Analyst

Building the Future of Open Finance Payward - the parent company behind Kraken, NinjaTrader, Breakout, xStocks, Payward Services and CF Benchmarks - has spent the last 15 years building one of the most modern and globally accessible financial infrastructure platforms in the industry, built to advance an open, global financial system. The team Founded in 2011, Kraken is one of the world's longest-standing crypto platforms, trusted by over 10 million individuals and institutions across the globe. It offers spot trading, margin, futures, staking, and OTC services, with products built for both individual investors and institutional clients. Kraken’s world-class Security Team is growing. As we continue to scale and mature our information technology controls program, we are seeking a senior professional with a strong background in risk management to help build and operate a program designed for enterprise scale. Kraken is seeking a Senior Risk Analyst to join the Security Governance, Risk, and Compliance (SecGRC) team. Reporting to the Senior Manager of Security Risk Management, this role is a key contributor to the execution and maturation of Kraken's Security Risk Management program. You'll conduct rigorous risk assessments, produce high-quality analysis, and help build the operational infrastructure that makes the program run — all in close partnership with program leadership. This role offers the opportunity to make a meaningful and lasting impact both within Kraken and across the broader industry. The ideal candidate is deeply analytical, process-minded, and energized by turning ambiguous risk signals into clear, repeatable, and scalable workflows. Entrepreneurial spirit and comfort with iterating quickly is a must. This is a fully remote role.   The opportunity Execute security risk assessments end-to-end — scoping, data gathering, analysis, findings documentation, and communicating results to stakeholders — in alignment with program methodology set by leadership Support the development and continuous refinement of risk assessment templates, workflows, and process guides that make the program consistent and scalable Maintain risk registers and ensure identified risks are tracked accurately and progressing through mitigation, remediation, or acceptance workflows Assist in building and maintaining Key Risk Indicators (KRI) tracking and risk reporting outputs, translating raw data into clear, well-structured deliverables for review by senior leadership Partner with technical teams including Vulnerability Management, Application Security, and Blue Team to gather risk-relevant data and incorporate operational findings into assessment work Identify opportunities to streamline and automate risk processes and bring those recommendations to program leadership for prioritization Contribute to the documentation and upkeep of risk program standards, procedures, and guidance materials Collaborate with cross-functional teams including Compliance, Internal Audit, Engineering, and Legal to ensure risk findings are well-contextualized and properly actioned Support audit preparedness activities and risk-related reporting as directed by program leadership   What you bring 5+ years of experience in information security risk management, cybersecurity governance, or GRC Hands-on experience conducting risk assessments and owning findings documentation — not just supporting assessments, but running them Strong working knowledge of risk management frameworks such as NIST CSF, ISO 27005, PCI DSS, or DoCRA Demonstrated ability to build repeatable processes — you've taken something ad hoc and made it structured and scalable Strong data analysis skills; able to clean, interpret, and present risk data clearly and accurately Experience contributing to KRI tracking and risk reporting for internal stakeholder audiences Familiarity with GRC tools such as AuditBoard, Archer, OneTrust, or ServiceNow GRC Proficien