| Job Position | Company | Posted | Location | Salary | Tags |
|---|---|---|---|---|---|
Anchorage Digital | United States | $81k - $90k | |||
Bluecubeservices | Remote | $67k - $80k | |||
Bitpanda | Remote | $115k - $132k | |||
Bitpanda | Remote | $106k - $114k | |||
| Learn job-ready web3 skills on your schedule with 1-on-1 support & get a job, or your money back. | | by Metana Bootcamp Info | |||
Brave | San Francisco, CA, United States | $90k - $120k | |||
B2c2 | Remote | $87k - $150k | |||
LI.FI | Remote | $60k - $90k | |||
LI.FI | Remote | $60k - $90k | |||
Ondo Finance | United States | $84k - $90k | |||
CoinGecko | Malaysia | $73k - $90k | |||
Coins.ph | Manila, Philippines | $27k - $67k | |||
Bitpanda | Remote | $115k - $132k | |||
Binance | Taipei, Taiwan |
| |||
Zinnia | Remote | $103k - $110k | |||
Inmobi | Remote | $90k - $110k |
Member of Compliance & Risk, Testing and Monitoring
- As a member of the TMG team, the individual will work on next generation testing practices in the first OCC chartered digital asset bank. This role will assist in enhancing the Bank's Fiduciary and Regulatory Compliance Program through identification of emerging risks and control gaps while scaling foundational IT risk management initiatives ranging from GRC Management, information security controls testing and risk assessment support. This highly cross-functional role covers multiple service offerings and global entities, offering a unique opportunity to manage various projects ranging from Bank’s regulatory obligations to Information Security risk assessments.
The successful candidate will be:
- Performing testing activities from end-to-end as a lead to assess design and effectiveness of various compliance and controls to identify potential control gaps for remediation, acting as subject matter expert in both IT and regulatory risk.
- Partnering with Operations, Compliance, Information Security, Engineering, Product, and Legal teams to translate complex regulatory requirements into actionable technical processes.
- Collaborating with risk owners to provide "credible challenge" to remediation plans and track findings from identification through to validation using GRC tools (Audit Board).
- Supporting information security risk assessments as needed.
Technical Skills:
- Manage and execute the testing life cycles using multiple methodologies.
- Strong working knowledge of core banking regulations, including but not limited to Complaint Management, Disclosures, Financial Crimes Compliance, Privacy and Security, and among other essential “alphabet” regulations.
- Has a complete conceptual knowledge and full understanding in principles, practices, and a working knowledge of the full lifecycle of audit / testing methodology, Information Security risk and controls, SOC, policy governance and management.
- Evaluate and interpret information / data to produce meaningful results to risk and control owners.
- Applies experience and analytical skills to “connect the dots” between the company’s business and products to the control environment in order to evaluate and identify risks and controls for Anchorage Digital and determine whether compliance obligations are being met.
- Resolves a wide range of issues in creative ways working directly with control owners to ensure regulatory requirements are being met, including managing and tracking findings (from risk assessments, audits, etc.) from identification to remediation.
- Has experience with GRC management tools (e.g., AuditBoard).
Complexity and Impact of Work:
- Execute and manage all phases of Compliance and InfoSec cyclical test reviews (involvement in data gathering, walkthrough discussions, detailed testing, communicating results to management, reporting, issue tracking).
- Prepare fieldwork material and data analytics on the reviews including detailed scoping, accurate, in-depth and well documented fieldwork, and clearly written issues to effectively convey risks identified.
- Collaborate with risk / control owners during the issue remediation phase by providing credible challenge of remediation plans developed by the issue owners to resolve findings.
- Assist with Issue Management framework implementation through metrics and issue tracking and validation.
- Identify and quantify relevant information security threat scenarios and assess the effectiveness of mitigating controls.
Organizational Knowledge:
- Work on complex issues where analysis of situations or data requires an in-depth knowledge of the company.
- Has a deep knowledge of the strategy of Anchorage Digital.
- Engage with other peers to develop methods, techniques and evaluation criteria for projects, programs, and people that have enterprise-wide impact.
- Ensure alignment and integration between initiatives, priorities, people, processes and structures in their department, cross-departments and with the broader strategic priorities of Anchorage Digital.
- Stay aware of changes through cross-functional collaboration to anticipate and prevent obstacles from hindering team performance.
- Collaborate effectively across teams and disciplines to solve problems and resolve technical debates.
Communication and Influence:
- Communicate and work effectively with diverse teams, ability to listen actively and incorporate others’ perspectives and have a track record of successful teamwork.
- Ability to adapt to different collaborative settings and resolve conflicts / disagreements diplomatically.
- Communicate complex issues clearly and credibly across a wide range of audiences. Scans the environment for key information and messages to adapt the communication strategy and persuade several diverse stakeholders and audiences.
- Builds effective relationships with stakeholders including clients, team managers, cross-functional partners, and external partners.
- Easy to approach and builds appropriate rapport.
You may be a fit for this role if you have:
- Knowledge of testing life cycles and methodologies.
- Experience in IT risk and information security audits.
- Experience in regulatory compliance, risk management, and auditing practices within the financial services industry.
- Experience in writing crisp, clear, accurate reports to summarize issues identified.
- A proven track record of delivering high quality work products and managing projects with tight timelines and multiple complex priorities.
- The ability to be flexible and pivot fast in an ever-changing environment.
Although not a requirement, bonus points if:
- You have expertise in auditing/testing Anti-Money Laundering programs and trading activities.
- Security certifications such as CISSP, CCSP.
- Understanding of crypto staking and/or governance.
- A technical/engineering background or mindset.
- You have strong SQL or data analytical skills to support the team in pulling data from BigQuery.
- You were emotionally moved by the soundtrack to Hamilton, which chronicles the founding of a new financial system. :)
What is a QA in a job?
QA stands for Quality Assurance, which is a process or department in a company responsible for ensuring that products or services meet a certain level of quality
In a job, QA may refer to the role of a Quality Assurance Engineer or a Software Testing Engineer, who is responsible for designing and implementing quality control procedures to ensure that products or services meet the company's quality standards
A QA Engineer may be involved in various stages of the product or service development cycle, from designing and planning quality control procedures to executing testing and analysis to identify and address issues or defects
They may also work closely with other departments, such as engineering, product management, and customer support, to ensure that customer needs are met and that products or services meet the desired level of quality
In the context of Web3, Quality Assurance (QA) refers to the process of testing decentralized applications (DApps), smart contracts, and other blockchain-based solutions to ensure their functionality, security, and performance
The role of a QA Engineer in Web3 may involve designing and implementing testing strategies to identify and fix bugs, vulnerabilities, and other issues that could affect the user experience, data integrity, or network security
Some of the specific responsibilities of a QA Engineer in Web3 may include:
- Developing test cases and scenarios for DApps, smart contracts, and other blockchain-based solutions
- Conducting automated and manual testing to identify and fix issues
- Collaborating with developers, product managers, and other stakeholders to ensure the quality of the product
- Ensuring that DApps and smart contracts are compatible with different blockchain networks and standards
- Contributing to the development of tools and frameworks for testing Web3 applications.