Job Description

This role focuses on security assurance, audit, and compliance within a custody security environment, with a strong emphasis on Web3/blockchain technologies. The Head of Custody Security will be responsible for testing security controls, supporting client assurance activities, performing vendor due diligence, and ensuring alignment with financial regulatory requirements.

Responsibilities

• Test security controls (identity management, key management, infrastructure)
• Support client assurance activities (RFPs, RFIs, DDQs)
• Analyze client inquiries and improve documentation
• Perform security due diligence for Web3/blockchain vendors
• Facilitate external audits
• Identify and remediate process gaps
• Ensure alignment with financial regulatory security requirements
• Research and share security best practices
• Evaluate security tools and technologies
• Review blockchain network upgrades

Requirements

• 8+ years of security assurance, audit, compliance, or cloud security engineering experience
• Experience testing security controls (IAM, key management, network/cloud)
• Strong understanding of IAM principles
• Knowledge of cryptographic key management
• Solid grasp of cloud and network security architecture
• Experience with SOC 1, SOC 2, ISO 27001, PCI DSS audits
• Exposure to AWS, GCP, Azure, and infrastructure-as-code
• Experience preparing client assurance materials
• Familiarity with blockchain platforms is advantageous
• Independent work ethic and ability to work under pressure
• Excellent communication skills
• Solution-oriented approach

Benefits

• No benefits