Senior Security Program Manager
Coinbase
Senior Security Program Manager
Job Description
Responsibilities
- Lead EMEA-focused security programmes by designing, launching and managing comprehensive compliance tracks across multiple jurisdictions, while liaising daily with U.S. shared-service partners
- Drive 1st- and 2nd-line security programs in risk, controls, operations to chart a clear path to achieve business outcomes under MiCA, DORA, BAIT, GDPR and local frameworks
- Collaborate with Information Security and Technology Risk and Controls teams to identify and manage risks, evolve controls, ensure compliance with applicable frameworks (SOX, SOC2 and ISO27001) and meet business objectives
- Own the roadmap by defining success metrics, adoption targets and delivery milestones; monitor progress using both qualitative insights and quantitative KPIs
- Identify cross-functional blockers proactively, assess impacts, and present clear mitigation plans to senior leadership
- Continuously refine security templates, playbooks and metrics so they remain simple, repeatable and scalable across new markets
Required Qualifications
- 8+ years in programme or project management roles, with 5+ years in security, risk or compliance
- Native-level fluency in English, with proven ability to translate complex security and risk concepts for a predominantly U.S.-based leadership and engineering audience
- Proven track record in a highly regulated ecosystem such as FinTech, payments or financial services
- Hands-on experience managing outsourced security providers and tracking SLAs/KPIs to ensure delivery
- Deep familiarity with EMEA frameworks (MiCA, DORA, BAIT, GDPR) and experience implementing cyber/security frameworks (NIST CSF, SOC2, ISO27001)
- Strong ability to design straightforward processes that flex to solve novel challenges and evolving regulations
- Excellent at distilling complex security risks into clear, concise updates for both technical teams and C-level stakeholders
- Comfortable working in a distributed, multi-cultural environment across EMEA
Preferred Qualifications
- Broad understanding of security domains and controls, especially in M&A contexts
- Experience leveraging automation or AI to accelerate programme delivery
- Exposure to all three lines of defence (1st, 2nd and 3rd) in a financial services setting
- Familiarity with crypto and blockchain technologies
Required Skills
- programme or project management
- security, risk or compliance
- translating complex security and risk concepts
- managing outsourced security providers and tracking SLAs/KPIs
- familiarity with EMEA frameworks (MiCA, DORA, BAIT, GDPR)
- implementing cyber/security frameworks (NIST CSF, SOC2, ISO27001)
- designing straightforward processes
- distilling complex security risks into clear updates
- working in a distributed, multi-cultural environment
Benefits
- bonus eligibility
- equity eligibility
- benefits (including medical, dental, and vision)
Salary Range
$90900 - $101000 GBP
Locations
- Northern Ireland, United Kingdom, Ireland, United Kingdom, United States (Remote)
Salary
90,900 - 101,000 GBP / yearly
Skills Required
- programme or project managementintermediate
- security, risk or complianceintermediate
- translating complex security and risk conceptsintermediate
- managing outsourced security providers and tracking SLAs/KPIsintermediate
- familiarity with EMEA frameworks (MiCA, DORA, BAIT, GDPR)intermediate
- implementing cyber/security frameworks (NIST CSF, SOC2, ISO27001)intermediate
- designing straightforward processesintermediate
- distilling complex security risks into clear updatesintermediate
- working in a distributed, multi-cultural environmentintermediate
Required Qualifications
- 8+ years in programme or project management roles, with 5+ years in security, risk or compliance (experience)
- Native-level fluency in English, with proven ability to translate complex security and risk concepts for a predominantly U.S.-based leadership and engineering audience (experience)
- Proven track record in a highly regulated ecosystem such as FinTech, payments or financial services (experience)
- Hands-on experience managing outsourced security providers and tracking SLAs/KPIs to ensure delivery (experience)
- Deep familiarity with EMEA frameworks (MiCA, DORA, BAIT, GDPR) and experience implementing cyber/security frameworks (NIST CSF, SOC2, ISO27001) (experience)
- Strong ability to design straightforward processes that flex to solve novel challenges and evolving regulations (experience)
- Excellent at distilling complex security risks into clear, concise updates for both technical teams and C-level stakeholders (experience)
- Comfortable working in a distributed, multi-cultural environment across EMEA (experience)
Preferred Qualifications
- Broad understanding of security domains and controls, especially in M&A contexts (experience)
- Experience leveraging automation or AI to accelerate programme delivery (experience)
- Exposure to all three lines of defence (1st, 2nd and 3rd) in a financial services setting (experience)
- Familiarity with crypto and blockchain technologies (experience)
Responsibilities
- Lead EMEA-focused security programmes by designing, launching and managing comprehensive compliance tracks across multiple jurisdictions, while liaising daily with U.S. shared-service partners
- Drive 1st- and 2nd-line security programs in risk, controls, operations to chart a clear path to achieve business outcomes under MiCA, DORA, BAIT, GDPR and local frameworks
- Collaborate with Information Security and Technology Risk and Controls teams to identify and manage risks, evolve controls, ensure compliance with applicable frameworks (SOX, SOC2 and ISO27001) and meet business objectives
- Own the roadmap by defining success metrics, adoption targets and delivery milestones; monitor progress using both qualitative insights and quantitative KPIs
- Identify cross-functional blockers proactively, assess impacts, and present clear mitigation plans to senior leadership
- Continuously refine security templates, playbooks and metrics so they remain simple, repeatable and scalable across new markets
Benefits
- general: bonus eligibility
- general: equity eligibility
- general: benefits (including medical, dental, and vision)
Tags & Categories
Senior Security Program Manager
Coinbase
Senior Security Program Manager
Job Description
Responsibilities
- Lead EMEA-focused security programmes by designing, launching and managing comprehensive compliance tracks across multiple jurisdictions, while liaising daily with U.S. shared-service partners
- Drive 1st- and 2nd-line security programs in risk, controls, operations to chart a clear path to achieve business outcomes under MiCA, DORA, BAIT, GDPR and local frameworks
- Collaborate with Information Security and Technology Risk and Controls teams to identify and manage risks, evolve controls, ensure compliance with applicable frameworks (SOX, SOC2 and ISO27001) and meet business objectives
- Own the roadmap by defining success metrics, adoption targets and delivery milestones; monitor progress using both qualitative insights and quantitative KPIs
- Identify cross-functional blockers proactively, assess impacts, and present clear mitigation plans to senior leadership
- Continuously refine security templates, playbooks and metrics so they remain simple, repeatable and scalable across new markets
Required Qualifications
- 8+ years in programme or project management roles, with 5+ years in security, risk or compliance
- Native-level fluency in English, with proven ability to translate complex security and risk concepts for a predominantly U.S.-based leadership and engineering audience
- Proven track record in a highly regulated ecosystem such as FinTech, payments or financial services
- Hands-on experience managing outsourced security providers and tracking SLAs/KPIs to ensure delivery
- Deep familiarity with EMEA frameworks (MiCA, DORA, BAIT, GDPR) and experience implementing cyber/security frameworks (NIST CSF, SOC2, ISO27001)
- Strong ability to design straightforward processes that flex to solve novel challenges and evolving regulations
- Excellent at distilling complex security risks into clear, concise updates for both technical teams and C-level stakeholders
- Comfortable working in a distributed, multi-cultural environment across EMEA
Preferred Qualifications
- Broad understanding of security domains and controls, especially in M&A contexts
- Experience leveraging automation or AI to accelerate programme delivery
- Exposure to all three lines of defence (1st, 2nd and 3rd) in a financial services setting
- Familiarity with crypto and blockchain technologies
Required Skills
- programme or project management
- security, risk or compliance
- translating complex security and risk concepts
- managing outsourced security providers and tracking SLAs/KPIs
- familiarity with EMEA frameworks (MiCA, DORA, BAIT, GDPR)
- implementing cyber/security frameworks (NIST CSF, SOC2, ISO27001)
- designing straightforward processes
- distilling complex security risks into clear updates
- working in a distributed, multi-cultural environment
Benefits
- bonus eligibility
- equity eligibility
- benefits (including medical, dental, and vision)
Salary Range
$90900 - $101000 GBP
Locations
- Northern Ireland, United Kingdom, Ireland, United Kingdom, United States (Remote)
Salary
90,900 - 101,000 GBP / yearly
Skills Required
- programme or project managementintermediate
- security, risk or complianceintermediate
- translating complex security and risk conceptsintermediate
- managing outsourced security providers and tracking SLAs/KPIsintermediate
- familiarity with EMEA frameworks (MiCA, DORA, BAIT, GDPR)intermediate
- implementing cyber/security frameworks (NIST CSF, SOC2, ISO27001)intermediate
- designing straightforward processesintermediate
- distilling complex security risks into clear updatesintermediate
- working in a distributed, multi-cultural environmentintermediate
Required Qualifications
- 8+ years in programme or project management roles, with 5+ years in security, risk or compliance (experience)
- Native-level fluency in English, with proven ability to translate complex security and risk concepts for a predominantly U.S.-based leadership and engineering audience (experience)
- Proven track record in a highly regulated ecosystem such as FinTech, payments or financial services (experience)
- Hands-on experience managing outsourced security providers and tracking SLAs/KPIs to ensure delivery (experience)
- Deep familiarity with EMEA frameworks (MiCA, DORA, BAIT, GDPR) and experience implementing cyber/security frameworks (NIST CSF, SOC2, ISO27001) (experience)
- Strong ability to design straightforward processes that flex to solve novel challenges and evolving regulations (experience)
- Excellent at distilling complex security risks into clear, concise updates for both technical teams and C-level stakeholders (experience)
- Comfortable working in a distributed, multi-cultural environment across EMEA (experience)
Preferred Qualifications
- Broad understanding of security domains and controls, especially in M&A contexts (experience)
- Experience leveraging automation or AI to accelerate programme delivery (experience)
- Exposure to all three lines of defence (1st, 2nd and 3rd) in a financial services setting (experience)
- Familiarity with crypto and blockchain technologies (experience)
Responsibilities
- Lead EMEA-focused security programmes by designing, launching and managing comprehensive compliance tracks across multiple jurisdictions, while liaising daily with U.S. shared-service partners
- Drive 1st- and 2nd-line security programs in risk, controls, operations to chart a clear path to achieve business outcomes under MiCA, DORA, BAIT, GDPR and local frameworks
- Collaborate with Information Security and Technology Risk and Controls teams to identify and manage risks, evolve controls, ensure compliance with applicable frameworks (SOX, SOC2 and ISO27001) and meet business objectives
- Own the roadmap by defining success metrics, adoption targets and delivery milestones; monitor progress using both qualitative insights and quantitative KPIs
- Identify cross-functional blockers proactively, assess impacts, and present clear mitigation plans to senior leadership
- Continuously refine security templates, playbooks and metrics so they remain simple, repeatable and scalable across new markets
Benefits
- general: bonus eligibility
- general: equity eligibility
- general: benefits (including medical, dental, and vision)
Tags & Categories