Senior Security Engineer, Governance Risk and Compliance

You'll operate at the fast-moving frontier of the crypto ecosystem, where trust, speed, and ironclad security are paramount. As a sharp, highly autonomous Senior Engineer in GRC, you'll love the details, anticipate gaps before dashboards turn red, and use human judgment to steer modern, tech-forward security frameworks. You'll balance real risk mitigation against empty paperwork, maintaining certifications, running vulnerability management programs, and owning policy, vendor risk, data protection, and business continuity programs.

Responsibilities

• Maintain ISO 27001 certification and prepare for SOC 2 Type 1 and 2
• Manage auditor relationships and own evidence collection in Vanta
• Own the vulnerability management SLA layer including weekly dashboards, breach escalation, and exception tracking
• Provide monthly leadership view on vulnerability management
• Own policy lifecycle including annual reviews, new policies, training rollout, attestation tracking, and exception requests
• Manage people-ops security controls including onboarding/offboarding evidence, access reviews, security awareness training, and background-check tracking
• Partner with HR on security workflow and own the auditable artifact
• Maintain vendor inventory and conduct pre-procurement assessments and annual reassessments
• Maintain the risk register and run quarterly risk reviews
• Manage DLP policy and tuning and data-classification programs
• Partner with Legal on PDPA compliance
• Own the business continuity and disaster recovery program including documentation, drills, and post-exercise improvements

Requirements

• 3–5 years in security or GRC program management, ideally at a fintech that grew through early stages
• Hands-on experience running ISO 27001 and SOC 2 audits end-to-end, including auditor management
• Deep fluency in Vanta (or Drata, with willingness to switch)
• Confident representing the security program to security teams both technically and as a trust signal
• Strong written and verbal communication
• Sound judgment on when a control gap is real risk vs. paperwork, and ability to escalate to the right audience quickly
• Strong interest in Cryptocurrency, Blockchain, Fintech, or Finance/Trading
• Proficient in English communication skill

Benefits

• MacBook or high-end laptop for working
• Full coverage of social insurance
• Premium health care for you and your family members
• Full 100% salary during probationary period
• Professional, friendly, well-equipped workspace
• Extensive on job training