Security Risk Manager (Crypto)

Location: Remote-first; work from anywhere in the world. The listing is associated with Almaty, Kazakhstan.

Company

hirify.global is a crypto technology company building payment infrastructure, custody, mining solutions, and enterprise tools for businesses and institutions.

What you will do

• Conduct information security risk assessments of partners and vendors during onboarding, prepare reports, and document risk treatment measures.
• Maintain the information security risk register, escalate issues to risk owners, and track risk treatment plans.
• Lead risk syncs and provide concise, data-driven updates and proposed solutions for C-level executives.
• Coordinate SOC 2 initiatives, including CC3 risk assessment, evidence preparation, and readiness for Type 2.
• Lead the information security components of VASP and other regulatory licensing applications, including cyber risk assessments, policies, procedures, and regulator responses.
• Lead the Governance & Compliance team of two people, including planning, workload allocation, and KPI management.

Requirements

• 4+ years of experience in Information Security Risk Management or GRC, with significant experience in fintech, crypto, or another regulated environment.
• Experience maintaining risk registers and working directly with business risk owners on assessment, treatment plans, and execution control.
• Practical experience in Third-Party Risk Management.
• Knowledge of ISO 27001/27005, NIST CSF, or SP 800-30, including qualitative and quantitative risk assessment methods.
• Experience preparing for SOC 2 or ISO 27001, including controls, evidence collection, and auditor engagement.
• Experience with information security regulatory requirements such as VASP, MiCA, DORA, or equivalents.
• Risk-assessment-level understanding of crypto infrastructure, including custody, wallets, keys, and HSM.
• Ability to prepare concise, data-driven materials with clear proposed solutions for C-level executives.
• Fluent Russian and C1 English required for documentation, audit collaboration, and regulatory communication.

Culture & Benefits

• Remote-first work from anywhere in the world with fully flexible working hours.
• 20 paid vacation days plus 12 bonus days per year.
• 100% paid sick leave.
• Paid English lessons through iTalki.
• Professional growth support through courses, certifications, and training programs.
• Employment via Service Agreement, with hirify.global product discounts and access to mining infrastructure.