BitMEX is hiring a

Web3 Security Assurance Analyst

Role Overview

This is a critical role supporting the Security Assurance team, part of the overall Security organization and is focused on Third Party Risk Management and Security Awareness. In the third party risk management role, you will build relationships with security and business leaders to ensure the third party security review process properly addresses risks while enabling the business to succeed. In the security awareness role, you will build relationships with the global workforce by explaining information security concepts and promoting secure behaviors and habits.

The ideal candidate will have strong communications skills, a passion for learning and helping others, and will thrive on working cross-functionally and building trust across Security, Engineering and related teams. Experience within a security, privacy or risk management function would be great.

Key Responsibilities

This individual would manage the security awareness and third party risk management program, ensuring the following:

• Execute on our Security Assurance roadmap.
• Support security awareness training efforts, including developing or sourcing training content and ensure training of employees and contractors
• Execute phishing campaigns
• Develop, plan, coordinate and deliver engaging security awareness sessions at a global scale on a regular basis throughout the year
• Work with multiple company stakeholders to develop “Security Champions”
• Define metrics to track security awareness program progress and maturity
• Create a security awareness mini-program that is engaging and impactful to an external audience
• Ensure all vendors (software, plug-ins, professional services, etc) are successfully vetted by the Security review process
• Continually support organizational alignment to maintain third party risk management program related standards and procedures to drive consistent, repeatable assessment activities
• Perform vendor security assessments for IT Risk with focus on Access Management, Change Management, Data Security, Networking protocols, and compliance requirements
• Monitor third party risk on an on-going basis and review risks/issues through remediation
  

Skills, Traits & Competencies

• 5+ years of security experience in relevant security domains (e.g. compliance, security risk management, TPM)
• Prior experience of working in Security and Privacy compliance engineering or similar groups at a tech or fintech.
• Expertise working on major compliance programs in a complex technical environment supporting at a minimum SOC 2, GDPR, and ISO 270001/2 Series frameworks.
• Strong communication skills, in particular around objectively measuring risk.
• Strong technical background working on complex engineering, security and operations projects and initiatives.
• A natural teacher, good at putting points across engagingly and enthusiastically and inspiring people to take an interest in information security
• Ability to communicate and market technical messages in a simple, clear, and engaging manner. Experience creating innovative content and working with different types of communications methods, to include newsletters, videos, printed materials, and hosted events.
• Excellent organizational and project management, relationship management, are all skills that will be key to be successful in this role.
• Understanding of learning theory or instructional design and concepts of organizational behavior, culture, and how culture impacts how people behave, learn, and interact with others.
• High sense of ownership, urgency, and drive.

Apply Now: