Senior Security Risk Management Analyst

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Conduct comprehensive security risk assessments from start to finish, encompassing scoping, data collection, analysis, documentation of findings, and communication with stakeholders.

• Assist in the development and enhancement of risk assessment templates, workflows, and procedural guides.

• Manage risk registers and monitor risks through mitigation, remediation, or acceptance processes.

• Create and sustain Key Risk Indicator tracking and risk reporting outputs.

• Convert raw risk data into clear and actionable deliverables for senior leadership.

• Collaborate with Vulnerability Management, Application Security, and Blue Team to acquire risk-related data.

• Identify chances to streamline and automate risk processes, recommending these improvements to program leadership.

• Uphold risk program standards, procedures, and guidance materials.

• Work alongside Compliance, Internal Audit, Engineering, and Legal teams to contextualize and address risk findings.

• Assist in audit readiness and risk-related reporting.

• Report to the Senior Manager of Security Risk Management within the Security Governance, Risk, and Compliance team.

⛳️ Requirements

• Over 5 years of experience in information security risk management, cybersecurity governance, or GRC.

• Practical experience in conducting end-to-end risk assessments, including scoping, data collection, analysis, documentation of findings, and communicating results.

• Solid understanding of NIST CSF, ISO 27005, PCI DSS, or DoCRA.

• Proven ability to develop repeatable, structured, and scalable processes.

• Strong data analysis capabilities, including cleaning, interpreting, and presenting risk data.

• Experience in contributing to Key Risk Indicator tracking and risk reporting for internal stakeholders.

• Familiarity with GRC tools such as AuditBoard, Archer, OneTrust, or ServiceNow GRC.

• Proficient in Google Workspace.

• Experience with SQL and/or Tableau is a significant advantage.

• Exceptional written communication skills.

• Self-motivated and comfortable working in ambiguous situations.

• Bachelor’s degree or higher in IT, Cybersecurity, Business Administration, Engineering, or a related discipline.

• CISM, CRISC, or ISO 27001 certifications are a plus.

• Experience in fintech or regulated industries is preferred.

🏝️ Benefits

• Fully remote position.

• Chance to create a meaningful and lasting impact within Kraken and the wider industry.

• Global and diverse team setting.

• Continuous skills or work-style assessments consistently applied across candidates.

• Opportunity/requirement to use Kraken products after joining.