Consensys is a blockchain software company building the tools, infrastructure and research that power the new Era of Decentralized Finance, for a more secure and open economy. Backed by SoftBank VF.
About the role
This role runs the internal posture engine — the risk register, critical control monitoring, evidence, audit operations and GRC tooling. It keeps risk state current so the Lead and the Risk Committee decide from accurate data in the Risk Dashboard and reporting. Drata is the register of record. Named owners close gaps; this role keeps the register, evidence and audit operations current.
What they're looking for
- Hands-on experience running a risk register, control library and audit cycle (ISO 27001 and/or SOC 2)
- Comfortable with GRC platforms (Drata or equivalent) and turning monitoring into evidence
- Proven ability to coordinate audits and customer questionnaires with named control owners
- Precise written work, register and Statement of Applicability quality matters
- Strong stakeholder management with control owners and auditors
- CISA, ISO 27001 Lead Implementer or Auditor, or equivalent professional certification
More about this role
Please note that we are unable to consider applications from candidates based in France, Italy, or Germany for this role.
Money is moving onto the internet, and the shift has a name: Open Money. This is money that is open, portable, agentic, and owned by you. MetaMask spent the last ten years building it; with 100M+ downloads, users in ~190 countries, and trillions in cumulative transaction volume, it's the most trusted self-custodial financial platform on the internet. Now we're building the operating system for your money: one place to hold, move, grow, and use anything you own. Join a remote-first, global team rebuilding how money works: a problem that touches everyone, every day.
This role runs the internal posture engine — the risk register, critical control monitoring, evidence, audit operations and GRC tooling. It keeps risk state current so the Lead and the Risk Committee decide from accurate data in the Risk Dashboard and reporting. Drata is the register of record. Named owners close gaps; this role keeps the register, evidence and audit operations current.
- Operate the risk register from the Security Programme threat model: populate, track treatment, record acceptance...
Browse similar: Startup jobs · Remote jobs