Apply on Employer Site

Crypto.com · 2 months ago

Head of Custody Security

Los Angeles, California

Full-time

Hybrid

Senior Level, Lead/Staff

$190K/yr - $230K/yr

8+ years exp

Crypto.com is a leading cryptocurrency platform, and they are seeking a Head of Custody Security to oversee the security controls and compliance for their custody services. The role involves designing security testing, supporting client assurance activities, and ensuring alignment with financial regulatory requirements.

Financial Services

H1B Sponsor Likely

Responsibilities

Conduct, design, and implement testing of security controls covering identity management, key management, and infrastructure (network and cloud) configurations

Support client assurance activities, including responding to Requests for Proposals (RFPs), Requests for Information (RFIs), and Due Diligence Questionnaires (DDQs)

Identify and analyze trends in client inquiries and provide feedback to internal teams to improve documentation and control readiness

Perform security due diligence and ongoing monitoring for Web3/blockchain vendors, including assessing their control maturity, reviewing SOC reports and security documentation, and identifying residual risks

Facilitate external audit activities, including coordination of walkthroughs, evidence collection, and response tracking

Identify and analyze gaps in current and new processes, then develop and track remediation recommendations to completion (e.g., onboarding flow)

Develop and maintain understanding of applicable financial regulatory security requirements and ensure alignment of controls

Research and share information security best practices, emerging threats, and mitigation strategies with internal teams

Evaluate and propose next-generation security tools, automation, and technologies to enhance overall security posture

Review blockchain network or protocol upgrades for their potential security impact on the platform

Qualification

Security assuranceCloud security engineeringIdentityAccess ManagementCryptographic key managementCloud platforms AWSCloud platforms GCPCloud platforms AzureSOC 1/SOC 2 complianceSolution-oriented approachCommunication skills

Required

At least 8 years of relevant experience in security assurance, audit, compliance, or cloud security engineering

Demonstrated experience testing and validating security controls across IAM, key management, and network/cloud environments

Strong understanding of Identity and Access Management (IAM) principles

Knowledge of cryptographic key management, HSMs, and KMS systems

Solid grasp of cloud and network security architecture and configuration

Proven experience supporting SOC 1, SOC 2, ISO 27001, PCI DSS, or similar external audits and assessments

Exposure to major cloud platforms (AWS, GCP, Azure) and infrastructure-as-code

Experience in preparing client assurance materials, RFP/RFI/DDQ responses, and evidence documentation

Can work independently and under pressure

Excellent verbal and written communication skills

Pragmatic and solution-oriented approach, ability to balance security requirements with operational feasibility and business needs

Preferred

Familiarity with blockchain platforms or digital asset custody systems is advantageous

Company

Crypto.com

Glassdoor3.2

Crypto.com was founded in 2016 and is the preferred crypto trading platform for over 100 million users worldwide, as well as the trusted industry leader in regulatory compliance, security, and privacy.

Founded in 2016

Singapore, SG

1001-5000 employees

https://www.crypto.com

H1B Sponsorship

Crypto.com has a track record of offering H1B sponsorships. Please note that this does not guarantee sponsorship for this specific role. Below presents additional info for your reference. (Data Powered by US Department of Labor)

Distribution of Different Job Fields Receiving Sponsorship

Represents job field similar to this job

Trends of Total Sponsorships

2024 (3)

2023 (1)

2022 (3)