Head of Security (Web3)

Location: Paris or remote within -5h/+2h GMT to ensure sufficient overlap with the team

Company

A DeFi lending protocol building an open credit network that provides access to lending and borrowing infrastructure for individuals, institutions, and ecosystem partners.

What you will do

• Define and continuously evolve the security strategy and roadmap across corporate IT, cloud and infrastructure, applications, supply chain, identity, and operational security.
• Build and lead the security function, including hiring and developing security operations and application security specialists.
• Personally handle critical security work such as threat modeling, architecture reviews, control implementation, and incident command.
• Establish a unified governance framework and lead the certification strategy for SOC 2, ISO 27001, or equivalent standards.
• Own incident response end to end, including runbooks, escalation structures, tabletop exercises, and external communication.
• Develop counterparty security programs for curators and partners and collaborate with Engineering, Protocol, Integrations, leadership, and external institutions.

Requirements

• 10+ years of security experience, including several years building or leading a security function.
• Strong understanding of crypto/Web3 threat models and experience in crypto, fintech, or financial services.
• Hands-on expertise across cloud, infrastructure, CI/CD, supply chain, identity, and application security.
• Experience owning incident response end to end, including incident command and external communication.
• Proven ability to build security teams, prioritize risks, and drive outcomes through teams that are not directly managed.
• Strong written and verbal communication skills, with credibility among executives and external financial institutions.

Nice to have

• Established public profile or network in the security or crypto-security community.
• Offensive security experience or experience establishing red and blue team capabilities.
• Familiarity with institutional and regulatory expectations, Crypto ISAC, or TIBER-style frameworks.
• Experience taking an organization through SOC 2, ISO 27001, or equivalent certification.

Culture & Benefits

• Remote flexibility with time together in Paris.
• Fair, top-tier compensation and comprehensive health coverage.
• Support for learning and professional growth.
• Inclusive hiring based on talent, potential, and values alignment.