About the Role
We are seeking a Senior Risk Analyst to join our Security Governance, Risk, and Compliance (SecGRC) team. This position is instrumental in the execution and maturation of our Security Risk Management program. As a Senior Risk Analyst, you will conduct rigorous risk assessments, produce high-quality analyses, and help develop the operational infrastructure necessary for the program's success. This is a fully remote role that offers an opportunity to make a meaningful impact within the organization and the broader industry.
Ready to apply for roles like this?
Unlock the company name and direct application link. Subscribers get instant access to fresh jobs across Dubai, Abu Dhabi and Riyadh, many with visa support.
Unlock employer & apply directly
The ideal candidate will possess a strong background in risk management, be deeply analytical and process-minded, and have the ability to turn ambiguous risk signals into clear, repeatable, and scalable workflows. An entrepreneurial spirit and a comfort with fast iteration are essential in this dynamic role.
Key Responsibilities
- Execute security risk assessments end-to-end: scoping, data gathering, analysis, documentation of findings, and results communication to stakeholders in accordance with program methodology set by leadership.
- Support the development and continuous refinement of risk assessment templates, workflows, and process guides to ensure consistency and scalability of the program.
- Maintain risk registers, ensuring identified risks are accurately tracked and progressing through mitigation, remediation, or acceptance workflows.
- Assist in developing and maintaining Key Risk Indicators (KRI) tracking and risk reporting outputs, translating raw data into clear, well-structured deliverables for senior leadership review.
- Partner with technical teams, including Vulnerability Management, Application Security, and Blue Team, to gather risk-relevant data and integrate operational findings into assessments.
- Identify opportunities to streamline and automate risk processes, presenting recommendations to program leadership for prioritization.
- Contribute to the documentation and maintenance of risk program standards, procedures, and guidance materials.
- Collaborate with cross-functional teams including Compliance, Internal Audit, Engineering, and Legal to contextualize risk findings and ensure proper action is taken.
- Support audit preparedness activities and risk-related reporting as directed by program leadership.
What You Bring
- 5+ years of experience in information security risk management, cybersecurity governance, or GRC.
- Hands-on experience conducting risk assessments and owning findings documentation.
- Strong working knowledge of risk management frameworks such as NIST CSF, ISO 27005, PCI DSS, or DoCRA.
- Demonstrated ability to build repeatable processes, transitioning from ad hoc to structured and scalable solutions.
- Strong data analysis skills, with the ability to clean, interpret, and clearly present risk data.
- Experience with KRI tracking and risk reporting for internal stakeholders.
- Familiarity with GRC tools such as AuditBoard, Archer, OneTrust, or ServiceNow GRC.
- Proficient in Google Workspace; SQL and/or Tableau experience is a strong plus.
- Excellent written communication skills, with deliverables that are clear and well-organized.
- Self-directed, comfortable working in ambiguity, and able to take direction and execute independently.
- Bachelor's degree or above in IT, Cybersecurity, Business Administration, Engineering, or a related field.
- CISM, CRISC, or ISO 27001 credentials are a plus; experience in fintech or regulated industries is preferred.
Our Commitment
We celebrate diverse talents, backgrounds, contributions, and unique perspectives, hiring based on merit to find individuals with the right abilities, knowledge, and skills for the job. We encourage applicants who may not meet all the listed requirements but are passionate or knowledgeable about crypto to apply.
We are proud to be an equal opportunity employer and do not tolerate discrimination or harassment based on any protected characteristic as outlined by federal, state, or local laws.
Candidate Privacy Notice
Applications are accepted on an ongoing basis unless a specific deadline is stated in the job posting. Applicants may redact or remove information identifying age, date of birth, or dates of attendance at educational institutions on their resumes. We consider qualified applicants with criminal histories for employment in accordance with the San Francisco Fair Chance Ordinance.
