Senior Security Engineer, Governance Risk and Compliance

Responsibilities

• Maintain ISO 27001 certification and prepare for SOC 2 Type 1 and 2
• Manage auditor relationships and own evidence collection in Vanta
• Own the vulnerability management SLA layer, including dashboards and breach escalation
• Manage the policy lifecycle, including annual reviews and training rollouts
• Oversee people-ops security controls such as onboarding/offboarding and access reviews
• Conduct vendor risk assessments and maintain the vendor inventory
• Maintain the risk register and run quarterly reviews
• Manage data protection through DLP policy tuning and data-classification programs
• Own the BCP/DR program, including documentation and drills

Requirements

• 3–5 years in security or GRC program management, ideally in fintech
• Hands-on experience running ISO 27001 and SOC 2 audits end-to-end
• Deep fluency in Vanta or Drata
• Strong written and verbal communication skills
• Proficient in English
• Strong interest in Cryptocurrency, Blockchain, or Fintech

Benefits

• MacBook or high-end laptop
• Full coverage of social insurance
• Premium health care for you and your family members
• Full 100% salary during probationary period
• Professional, friendly, and well-equipped workspace
• Extensive on-the-job training with emerging technologies

About the Company

Coinhako operates at the fast-moving frontier of the crypto ecosystem, focusing on trust, speed, and ironclad security.