Risk & Controls Manager

This is a Fully Remote Job About Our Client:The organization operates in the financial technology industry, focusing on the transition to Open Money—digital money that is open, portable, and user-controlled. With over 100 million downloads and users in approximately 190 countries, the company has established itself as a leading self-custodial financial platform with significant transaction volume. The team is remote-first and global, dedicated to building an operating system that allows users to hold, move, grow, and use digital assets securely. About the Opportunity:The RISK & CONTROLS MANAGER role is responsible for managing the internal posture engine that supports risk management and governance. This includes maintaining the risk register, monitoring critical controls, managing evidence and audit operations, and using GRC tools to ensure accurate risk data for decision-making by leadership and the Risk Committee. The position plays a key role in keeping risk information current and ensuring controls are effective, supporting the organization’s security program and compliance efforts. Responsibilities:Operate and maintain the risk register based on the security program's threat modelTrack risk treatments, acceptance decisions, and exceptionsKeep the ISMS and security policies up to date for audit readinessDraft security standards when requestedManage the control and evidence system using Drata or equivalentRun critical control monitoring and address control driftMaintain evidence files for assessments and auditsIncorporate threat assessment findings into the risk registerCoordinate audit preparation and logistics (ISO 27001, SOC 2)Manage external testing coordination (red team, pentest)Conduct security awareness initiatives and weekly alertsTrack residual risk, exceptions, and gap closure against risk appetiteReport on risk register status and evidence healthEnsure continuous collection of control evidence and audit operations Requirements:Experience managing risk registers, control libraries, and audit cycles (ISO 27001 and/or SOC 2)Proficiency with GRC platforms such as DrataAbility to coordinate audits and customer due diligence questionnairesStrong written communication skills for documentation qualityEffective stakeholder management with control owners and auditorsRelevant certifications such as CISA or ISO 27001 Lead Implementer/Auditor Pay Range and Compensation Package:US pay range (excluding bonus, equity, or other benefits): $150,000—$206,000 USDCompensation for candidates outside the US will be determined based on location, experience, and skills Equal Opportunity Statement: Our client is an equal opportunity employer. They celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, or national origin. Note:TalentHop is a recruitment partner of this role. Please note that all employment decisions, including candidate assessment, interviews, hiring, compensation, and employment terms, are made exclusively by the hiring employer.