Job Description

This role focuses on security assurance, audit, and compliance, specifically within the context of digital asset custody and blockchain technologies. The Head of Custody Security will be responsible for testing security controls, supporting client assurance activities, performing vendor due diligence, and ensuring alignment with financial regulatory requirements.

Responsibilities

• Test security controls (IAM, key management, infrastructure)
• Support client assurance activities (RFPs, RFIs, DDQs)
• Analyze client inquiries and improve documentation
• Perform security due diligence on Web3/blockchain vendors
• Facilitate external audits
• Identify and remediate process gaps
• Ensure alignment with financial regulatory security requirements
• Research and share security best practices
• Evaluate security tools and technologies
• Review blockchain network upgrades

Requirements

• 8+ years of security assurance, audit, or compliance experience
• Experience testing security controls (IAM, key management, network/cloud)
• Strong understanding of IAM principles
• Knowledge of cryptographic key management
• Solid grasp of cloud and network security
• Experience with SOC 1, SOC 2, ISO 27001, or PCI DSS audits
• Exposure to AWS, GCP, Azure, and infrastructure-as-code
• Experience preparing client assurance materials
• Familiarity with blockchain platforms is advantageous
• Independent work ethic and ability to work under pressure
• Excellent communication skills
• Solution-oriented approach

Benefits

• No benefits