Lead, Security Policy

Coinbase is looking for an experienced Security Policy Lead to join the team. The Security Policy Lead will steer development, maintenance, and evolution of the security policy framework, and work with all security teams to implement, manage and track exceptions to policies, standards, and plans over time.

What you’ll be doing (ie. job duties):

• Assess, evolve, and drive the policy management framework for all Security policies and standards in partnership with Security teams and Enterprise Risk Management
• Review and make recommendations for streamlining existing and future security policies
• Appropriately challenge and assess control design and effectiveness in order to ensure policy and standard enforcement
• Create a process and collateral for rolling out new security policies to the whole company
• Establish, document, and broadly communicate security policy management norms to the Security organization, outlining how to create, maintain, enforce, and deprecate security policies in line with enterprise policy requirements
• Collaborate within Security GRC and regional partners to support audits and examinations, track policy implementation and issues, and incorporate global security compliance requirements into the Security policy framework
• Manage the Security Exception Process to enable Security teams to track exceptions, manage approvals, and improve automation
• Assess security policies of Coinbase acquisitions, and appropriately integrate them into the Coinbase policy hierarchy
• Partner with Security and Privacy teams to develop key performance indicators for the Security organization

What we look for in you (ie. job requirements):

• Minimum of 7+ years of relevant experience in information security policy, risk or compliance, including assessing security risks and controls for global organizations
• Experience with global security standards such as ISO 27001, NIST CSF, NIST 800-53, or SOC 2
• Expert, communicator and writer; you can coach others on their writing skills, you can adapt your communication style for your audience, and you have experience drafting policies, reports, and other written materials for a variety of executive audiences
• Knowledge of global cybersecurity, technology and data privacy regulatory requirements for financial services
• Experience reporting policy and compliance posture to senior stakeholders
• Ability to direct cross functional work and hold others accountable to committed deadlines
• Knowledge of a cloud-services environment

Nice to haves:

• Security certifications, e.g., CISM, CGEIT, CISSP, CRISC,
• Experience working with GRC tools, e.g. RSA Archer, ServiceNow
• Experience or foundational knowledge in Cryptography and or Blockchain
• Masters Degree in a related discipline: Information Technology, Cyber Security, Data Science

Job #: P22384

Pay Transparency Notice: Depending on your work location, the target annual salary for this position can range from $188,275 to $221,500 + target bonus + target equity + benefits (including medical, dental, vision and 401(k)).

Pay Transparency Notice: Depending on your work location, the target annual salary for this position can range as detailed below. Full time offers from Coinbase also include target bonus + target equity + benefits (including medical, dental, vision and 401(k)).Pay Range: $188,275—$221,500 USD