Work Across
Get started
All jobs
Save

Deputy Regional Information Security Officer

Kraken
Contract type
Ongoing
Work mode
Remote
Experience
Senior · 7+ years

Job description

Deputy Regional Information Security Officer responsible for ICT security, operational resilience and regulatory compliance across a portfolio of Kraken/Payward entities, primarily in the UAE. Acts as named security officer accountable to entity boards and regulators such as VARA.

At a glance

Work mode
Remote

What you'll do

  • Serve as the named ICT security officer for appointed entities, with formal accountability for security risk, ICT governance, and resilience oversight at board level
  • Prepare and present security, risk, and resilience materials to entity boards, with material review and coaching from the Global RISO Lead beforehand
  • Act as the primary point of contact for VARA and other relevant regulatory authorities on ICT and security matters, including examinations, inspections, licensing interactions, and ongoing supervisory dialogue
  • Support entity go live processes by implementing and localizing established group ICT governance frameworks for new market launches
  • Lead ICT and security risk assessments for appointed entities, escalating material risks through local governance and the Global RISO Lead
  • Maintain and adapt entity level policies and procedures to align with group standards and UAE regulatory requirements
  • Coordinate control testing, evidence documentation, and audit preparation with global security and compliance teams
  • Manage the classification, escalation, and regulatory reporting of ICT-related incidents within required timeframes
  • Lead business impact assessments, critical function mapping, and business continuity planning at the entity level
  • Oversee continuity and recovery testing, ensuring outputs meet regulatory expectations and feed back into global resilience planning
  • Maintain oversight of ICT third-party dependencies and outsourcing arrangements in line with regulatory requirements
  • Act as a key local liaison between UAE entities, the RISO team, Group Security, and Compliance
  • Drive local implementation of group frameworks, policies, and resilience standards, adapting them where jurisdiction-specific requirements demand
  • Represent entity priorities in group-led security initiatives and governance forums
  • Prepare, contribute and report to regional risk governance and board committee meetings, highlighting control status, risk exposure, and readiness
  • Execute risk assessments and control testing across UAE operations in line with VARA cybersecurity guidelines and security best practices
  • Maintain and review Business Impact Assessments (BIA), integrating findings into global resilience planning
  • Contribute to Business Continuity Plan (BCP) documentation, testing, and updates, including entity-specific scenarios
  • Participate in remediation planning for audit findings and track progress to closure
  • Support the RISO in preparing and submitting regulatory documentation to regulators
  • Assist in responses to regulatory examinations, including due diligence and compliance queries
  • Liaise with compliance and legal teams to interpret regulatory changes and propose control adaptations
  • Participate in the regional incident response process, assist with post-incident reviews, and support continuous improvement activities
  • Coordinate with cross-functional stakeholders to embed security requirements into operational processes

What we're looking for

  • 7+ years of experience in information security governance, ICT risk management, or regulatory compliance in a regulated financial services, fintech, or virtual asset environment
  • Direct experience as a named regulatory contact, involvement in regulatory examinations, supervisory interactions, licensing processes, or equivalent
  • Familiarity with UAE regulatory frameworks
  • Demonstrated ability to implement, adapt, and maintain compliance or governance frameworks within a regulated environment
  • Experience conducting risk assessments, business impact analyses, and resilience planning at the entity level
  • Familiarity with ICT outsourcing and third-party risk management within group structures
  • Ability to translate technical risk into board-level narrative and regulatory-grade documentation
  • Comfortable operating across multiple jurisdictions simultaneously, each at a different stage of regulatory maturity
  • Strong project management skills and the ability to drive outcomes across cross-functional, globally distributed teams

Nice to have

  • Experience with VARA or other virtual asset / crypto-native regulatory regimes
  • Certifications such as CISSP, CISM, CRISC, CISA, or ISO27001 Lead Implementer
  • Familiarity with EU frameworks such as DORA and MiCA

Your team

RISO team

Remote-first, international team shaping crypto asset governance and resilience; works with Group Security, Compliance, and entity boards.

How to get hired

  1. 1We may ask candidates to complete job-related skills or work-style assessments as part of our hiring process

Apply

Save

About Kraken

Building the Future of Open Finance

Payward - the parent company behind Kraken, NinjaTrader, Breakout, xStocks, Payward Services and CF Benchmarks - has spent the last 15 years building one of the most modern and globally accessible financial infrastructure platforms in the industry. Founded in 2011, Kraken is one of the world's longest-standing crypto platforms, trusted by over 10 million individuals and institutions across the globe. It offers spot trading, margin, futures, staking, and OTC services, with products built for both individual investors and institutional clients.

Mission

Advance an open, global financial system

Key facts

  • 2011
  • Crypto / digital asset platform
  • Founded in 2011
  • Trusted by over 10 million individuals and institutions across the globe
  • Offers spot trading, margin, futures, staking, and OTC services
  • Operates across a growing network of regulated entities spanning Europe, the Middle East, and Asia Pacific
  • Parent company Payward includes Kraken, NinjaTrader, Breakout, xStocks, Payward Services and CF Benchmarks

What they value

  • We hire based on merit
  • We celebrate the diverse talents, backgrounds, contributions, and unique perspectives that everyone brings to the table