Senior Analyst, Security Compliance

Kraken’s world-class Security Team is growing. As we continue to scale and mature our information technology controls program, we are seeking a senior professional with a strong background in IT controls and external audit to help build and operate a program designed for enterprise scale.

Responsibilities

Lead and manage SOC 1 and SOC 2 examinations under AICPA standards in a complex, rapidly evolving technology environment, partnering with external auditors and internal teams to design, implement, and continuously improve IT control processes; Support end-to-end SOX planning and execution, including IT system scoping, audit readiness, and development and delivery of training for control owners operating in a high-growth, regulated business; Act as a trusted advisor to Security, IT, Infrastructure, Engineering, Data, and Finance teams, translating SOX and audit requirements into practical, scalable controls aligned with modern technology stacks; Lead security and IT control gap assessments, evaluate control design and operating effectiveness, and drive remediation efforts through to completion in partnership with control owners; Facilitate the ongoing maturation of IT general controls (ITGCs) and IT application controls (ITACs), balancing regulatory expectations with the pace of product and platform innovation; Oversee the quality and execution of audit initiatives, applying strong professional judgment to identify control gaps, assess risk, and guide teams through complex audit and compliance matters; Perform impact assessments for SOX control deficiencies and design risk-based, pragmatic remediation plans that stand up to auditor scrutiny without slowing the business; Implement and enhance controls monitoring and defense-in-depth across key IT risk areas to improve audit outcomes and strengthen the overall control environment; Partner cross-functionally to identify systemic program challenges, recommend process improvements, and drive durable solutions in a scaling organization; Develop and maintain clear, auditor-ready documentation, including data flow diagrams and process flowcharts for high-risk security and financial processes; Work closely with internal and external auditors, helping them navigate a sophisticated IT control environment and ensuring efficient, high-quality audits; Support audit evidence collection and continuous improvement initiatives, including leveraging automation to improve efficiency, consistency, and scalability

Requirements

5+ years of experience in external IT audit and/or technology risk assurance or advisory, with demonstrated ownership of complex audit requirements; Strong hands-on experience with Internal Controls over Financial Reporting (ICFR), including SOX 404 frameworks, control design, and operating effectiveness testing; Prior experience at a Big 4 or other large public accounting firm, or equivalent experience working with external auditors in a highly regulated environment; Proven ability to lead compliance and audit initiatives end to end, from planning and risk assessment through remediation and audit close; Experience auditing or assessing hybrid and cloud-based environments (e.g., IaaS, PaaS, SaaS), including access management, change management, and logging/monitoring controls; Ability to operate autonomously in ambiguous, fast-paced environments, driving outcomes across cross-functional teams with minimal supervision; Strong oral and written communication skills, with the ability to clearly explain technical concepts to technical and non-technical stakeholders; Demonstrated ability to manage multiple priorities, coordinate cross-functional work, and hold stakeholders accountable to agreed timelines; Strong organizational and time management skills, with a high degree of self motivation and effectiveness in a remote or distributed working environment

Nice to have

Exposure to fintech, payments, crypto, or digital asset business models, an added plus for crypto audit experience; Familiarity with risk and control frameworks (e.g., NIST, ISO 27001, COBIT) beyond baseline audit requirements; Professional security management certification such as a Certified Public Accountant (CPA) or Certified Information Systems Auditor (CISA) or Certified in Risk and Information Systems Control (CRISC) other similar credentials, is a huge plus

Benefits

Accelerate your technical depth by working in a cutting-edge, modern infrastructure environment, gaining exposure to cloud-native architectures and complex, real-time systems; Broaden your impact and perspective by collaborating with highly integrated, globally distributed teams and working alongside world-class professionals across engineering, security, and other technical disciplines; Move beyond “check-the-box” compliance to influence how controls are designed and scaled in a fast-growing, regulated technology business; Gain meaningful ownership and visibility while helping shape a maturing audit and compliance program in a dynamic, evolving industry