Risk & Controls Manager
New
M
MetaMaskWeb3 Financial Platform
UNITED STATES - Remote, LATAM - Remote, EMEA - Remote. Please note that we are unable to consider applications from candidates based in France, Italy, or Germany for this role.Full-TimeManager
Salary150,000 - 206,000 USD per year
Apply NowOpens the employer's application page
Job Details
- Required Skills
- Stakeholder managementRisk Management
Requirements
- Hands-on experience running a risk register, control library, and audit cycle (ISO 27001 and/or SOC 2).
- Proficiency with GRC platforms such as Drata or equivalent.
- Proven ability to coordinate audits and customer questionnaires with control owners.
- Exceptional written communication skills for maintaining register and Statement of Applicability quality.
- Strong stakeholder management skills.
- Professional certification such as CISA, ISO 27001 Lead Implementer, or ISO 27001 Auditor.
Responsibilities
- Operate the risk register from the Security Programme threat model by tracking treatment and recording acceptance decisions.
- Maintain the ISMS and security policy library to support audit readiness.
- Manage the Drata GRC platform for control monitoring, Statement of Applicability, and evidence automation.
- Coordinate internal and external audit logistics, including ISO 27001 and SOC 2 preparation.
- Perform critical control health check-ins and route drift alerts to the SOC.
- Track residual risk and gap-closure against risk appetite.
- Report register state and evidence health to the Lead and Risk Committee.
View Full Description & ApplyYou'll be redirected to the employer's site
