Sr. Security Risk Management Analyst (Crypto)

Location: Remote. Eligible locations: United Kingdom, Brazil, United Arab Emirates, Ireland, Peru, Sweden, Colombia, Argentina, Romania, Cyprus, Switzerland, Portugal, Lithuania, South Africa, Czech Republic, Canada, Hungary, Mexico, Chile, Poland, Spain, and Bulgaria.

Company

hirify.global is a global crypto platform offering spot trading, margin, futures, staking, and OTC services for individual and institutional clients.

What you will do

• Execute security risk assessments end to end, including scoping, data gathering, analysis, findings documentation, and stakeholder communication.
• Develop and refine risk assessment templates, workflows, process guides, and program standards.
• Maintain risk registers and track risks through mitigation, remediation, or acceptance workflows.
• Build KRI tracking and risk reporting outputs for senior leadership.
• Partner with Vulnerability Management, Application Security, Blue Team, Compliance, Internal Audit, Engineering, and Legal.
• Identify opportunities to streamline and automate risk processes and support audit preparedness.

Requirements

• 5+ years of experience in information security risk management, cybersecurity governance, or GRC.
• Hands-on experience conducting risk assessments and owning findings documentation.
• Working knowledge of risk management frameworks including NIST CSF, ISO 27005, PCI DSS, or DoCRA.
• Experience building repeatable, structured, and scalable processes from ad hoc workflows.
• Strong data analysis skills, including cleaning, interpreting, and clearly presenting risk data.
• Experience contributing to KRI tracking and risk reporting for internal stakeholders.
• Familiarity with GRC tools such as AuditBoard, Archer, OneTrust, or ServiceNow GRC.
• Proficiency in Google Workspace.
• Excellent written communication and the ability to work independently in ambiguous situations.
• Bachelor’s degree or higher in IT, Cybersecurity, Business Administration, Engineering, or a related field.

Nice to have

• SQL or Tableau experience.
• CISM, CRISC, or ISO 27001 credentials.
• Experience in fintech or regulated industries.

Culture & Benefits

• Fully remote work across the listed eligible locations.
• Global, diverse environment with an emphasis on merit and inclusion.
• Applications are accepted on an ongoing basis unless a deadline is specified.
• Qualified applicants may redact age, date of birth, and education attendance or graduation dates from resumes.
• Job-related skills or work-style assessments may be included in the hiring process.

Hiring process

• Applicants may be asked to complete job-related skills or work-style assessments; results are considered alongside experience and interviews.