About The Role
We are looking for a Security Associate to join our growing Security team and play a critical role in evaluating the security posture of our partners and acquisition targets. You’ll work closely with various internal teams (Legal, Compliance, Business Development, Engineering, Product) to identify and assess security risks, provide recommendations, and ensure that our partnerships and acquisitions align with our security standards and policies. This role requires a strong understanding of information security principles, excellent communication skills, and the ability to adapt to a fast-paced and evolving environment.
As a Security Associate, you will:
- Conduct security assessments and due diligence on potential partners and acquisition targets.
- Identify and assess security risks, vulnerabilities, and compliance gaps.
- Develop and present comprehensive security reports and recommendations to internal stakeholders.
- Collaborate with Legal, Compliance, and Business Development teams to integrate security requirements into partnership agreements and contracts.
- Work closely with engineering and product teams to ensure security best practices are implemented throughout the partnership and acquisition lifecycle.
- Provide ongoing security guidance and support to partners and acquired entities.
- Stay up-to-date with the latest security threats, trends, and technologies.
Requirements
- 3+ years of experience in information security, risk management, or a related field.
- Proven experience conducting security assessments, due diligence, and risk analysis.
- Strong understanding of information security principles, concepts, and best practices.
- Familiarity with various security frameworks and standards (e.g., ISO 27001, NIST, SOC 2).
- Excellent analytical, problem-solving, and communication skills.
- Ability to work independently and collaboratively in a fast-paced environment.
- High attention to detail and ability to manage multiple projects simultaneously.
- Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent practical experience.
- Experience with cloud security (AWS, Azure, GCP) and containerization technologies (Docker, Kubernetes) is a plus.
- Familiarity with penetration testing, vulnerability management, and incident response processes is a plus.
- Passion for crypto and blockchain technology is a plus.
