What you’ll be doing (ie. job duties):

• Maintain an active pulse on Coinbase’s customers’ security related concerns to inform our security and product strategy
• Facilitating external audit activities including coordination of audit walkthroughs and fulfillment of evidence requirements.
• Assist in regulatory security requirement gap assessments.
• Perform regulatory requirement mapping for control requirements.
• Conduct, design, and implement  testing over security controls. Identify and analyze process gaps, develop remediation recommendations, and track to completion.
• Work closely with internal and external auditors to educate them and achieve compliance over technology control environments.
• Communicate progress, escalations, and issue resolutions to management and team stakeholders.
• Create procedural documentation, including training materials or process documentation.
• Manage responses to customer inquiries, including contributing to Request for Proposals (RFP), automating responses to customer security inquiries, and diligence assessments.

What we look for in you (ie. job requirements):

• 3+ years of security/IT compliance or equivalent experience.
• BA or BS in a technical field or equivalent experience.
• Demonstrated project management experience.
• Hands-on experience with implementing, reviewing or auditing security frameworks such as SOC 1, SOC 2, ICFR/SOX, and/orNIST.
• Prior experience working closely with auditors and/or external regulators.
• Experience with compliance initiatives from start to finish.
• Outstanding written and spoken communication skills.
• Ability to effectively and autonomously accomplish outcomes across cross-functional teams in ambiguous situations with light supervision.
• Ability to multitask, prioritize work, and meet deadlines in a fast paced environment.
• Focus on precision and accuracy, and the drive to clarify ambiguity.
• Customer service orientation with a problem-solving approach.
• Successful demonstrated experience managing and working with internal cross-functional teams and product engineering groups.

Nice to haves:

• Prior experience at a Big 4 or consulting experience in Cybersecurity preferred
• Security certifications e.g. CISA, CISSP, CISM or other relevant certifications
• Experience mapping common controls across multiple frameworks in a GRC tool 
• Financial services or financial regulatory experience

P62756