GRC Expert

职位要求 / 描述

<div class="content-intro"><p>The world of digital assets is accelerating in speed, magnitude, and complexity, opening the door to new ways for leveraging the blockchain. Fireblocks’ platform and network provide the simplest and most secure way for companies to work with digital assets and it trusted by some of the largest financial institutions, banks, globally-recognized brands, and Web3 companies in the world, including BNY Mellon, BNP Paribas, ANZ Bank, Revolut, and thousands more. </p></div><p class="p1"><strong>About the Role</strong></p> <p class="p1">We are looking for a passionate and experienced EU Governance, Risk, and Compliance (GRC) expert to lead our company’s efforts in aligning with the Digital Operational Resilience Act (DORA) and Markets in Crypto-Assets Regulation (MiCA) in the European Union. This role is critical in driving our security and compliance programs, ensuring they not only meet regulatory standards but also enhance trust and confidence among our customers and stakeholders.</p> <p class="p1">As the EU GRC Manager, you will spearhead the implementation of security frameworks that align with DORA and MiCA, act as the primary liaison with our European customers on compliance matters, and collaborate with cross-functional teams to embed regulatory compliance into our operations.</p> <p class="p1">Reporting line: GRC Director</p> <p class="p1"><strong>What you will do</strong></p> <ul class="ul1"> <li class="li2"><span class="s1">Drive the development and execution of the company’s compliance strategy for DORA and MiCA regulations.</span></li> <li class="li2"><span class="s1">Conduct gap analyses and risk assessments to identify areas of improvement in security, operational resilience, and compliance processes.</span></li> <li class="li2"><span class="s1">Develop and maintain policies, procedures, and controls to align with EU regulatory requirements.</span></li> <li class="li2"><span class="s1">Act as a primary point of contact for EU customers on security matters and manage operations related to EU customer audits, due diligence queries, security questionnaires, etc., while demonstrating our commitment to regulatory adherence and security excellence.</span></li> <li class="li2"><span class="s1">Collaborate with internal teams to ensure compliance initiatives are seamlessly integrated into business processes.</span></li> <li class="li2"><span class="s1">Ensure timely identification, assessment, and remediation of risks to maintain continuous alignment with regulatory requirements.</span></li> <li class="li2"><span class="s1">Stay up to date with the evolving EU regulatory landscape, constantly research and explore various approaches and solutions in the market, and provide proactive insights to the business.</span></li> <li class="li2"><span class="s1">Educate and train internal teams on DORA, MiCA and other related regulations and compliance standards to foster a culture of awareness and accountability.</span></li> <li class="li2"><span class="s1">Plan an annual work program and budget, including internal and external activities, events, training, development, etc.</span></li> <li class="li3"><span class="s1">Report to senior and executive management within Fireblocks to ensure alignment with business objectives.</span></li> </ul> <p class="p1"><span class="Apple-converted-space"> </span><strong>Qualifications:</strong></p> <ul class="ul1"> <li class="li2"><span class="s1">Minimum of 4+ years of experience in cybersecurity or GRC.</span></li> <li class="li2"><span class="s1">Proven experience in understanding and navigating security and GRC programs, working with various legal, compliance, GRC and security teams both externally with customers and internally.</span></li> <li class="li2"><span class="s1">In-depth knowledge of EU regulatory frameworks such as DORA, MiCA, GDPR, MaRisk, TIBER-EU etc.</span></li> <li class="li2"><span class="s1">Strong understanding of industry best practices, frameworks

技能关键字

职责方向