Lead, Technology Risk

Job Title: Lead, Technology Risk

Company: Coinbase

Location: United States (Remote)

About Coinbase

Coinbase’s mission is to increase economic freedom in the world by building an on-chain platform to modernize the global financial system. The company seeks passionate individuals who believe in the power of crypto and blockchain to update the financial system and are eager to contribute to solving tough problems in an environment that pushes their limits.

Role Overview

Coinbase is looking for a Lead to drive the Technology Risk function. This role is critical to supporting the implementation and maturity of Coinbase's technology and security risk management program. You will define, quantify, and communicate risks and help use these insights to inform key business decisions. Additionally, you will be responsible for leading a team of technology risk analysts and managing a wide range of risk management activities across global teams.

Key Responsibilities

• Enable Risk-Informed Business Decisions: Help teams and leadership make decisions by clearly communicating both quantitative and qualitative trade-offs of risks.
• Risk Lifecycle Management: Manage risks from intake to mitigation. This includes risk assessment, triage, analysis, collaboration with stakeholders, and validating risk mitigation execution.
• Risk Register Maintenance: Oversee the risk register’s quality control, tooling support, and the implementation of automation for continuous improvement.
• Continuous Program Iteration: Regularly improve risk models and scoring methodologies to adapt to new information and changing threats.
• Reporting on Risk Posture: Generate reports on risk posture, findings, and metrics. Make recommendations for mitigation to senior leadership and risk owners.
• Communication and Training: Create and maintain communication and training plans to roll out the technology risk program across the organization, maintaining runbooks, intranet pages, and dashboards.
• Team Leadership: Build, grow, and mentor a team of technology and security risk analysts, fostering a culture of agility and continuous innovation.
• Enterprise Risk Alignment: Work closely with Enterprise Risk Management to escalate risks as necessary and report metrics to senior leadership.
• Global Collaboration: Help scale the risk framework across Coinbase’s global entities, products, and regions while collaborating with GRC teams, Legal, and Compliance for assessments and reporting.
• Audit and Regulatory Support: Assist in data compilation for audit and regulatory inquiries.
• Industry Awareness: Stay updated on emerging threats, international regulations, and industry benchmarks.

What We’re Looking For

• Experience:
• 8+ years in risk management, preferably within a 1st or 2nd Line of Defense (LoD) risk management function or a Governance, Risk, and Compliance (GRC) organization.
• Experience in technology risk with a focus on IT infrastructure, asset management, systems development lifecycle, and resilience.
• Risk Management Frameworks:
• Familiarity with frameworks like ISO 27001/5, NIST CSF, COBIT, ITIL, DORA, and FAIR risk methodologies for monitoring and validating controls and risks.
• Technical Risk Expertise:
• In-depth understanding of technical risk solutions, ability to perform quantitative risk assessments on IT domains such as infrastructure and security.
• Project Management & Communication:
• Comfortable with project management tools (e.g., Jira, Archer) and analytics tools.
• Strong communication and documentation skills for both technical and non-technical audiences.
• Leadership:
• Proven experience managing and mentoring high-performing teams, helping them grow and mature in their roles.
• Regulatory Familiarity:
• Experience with US and international regulatory frameworks impacting technology organizations.
• Problem-Solving in Ambiguity:
• Comfortable navigating complex, ambiguous situations while managing multiple assessments at once.
• Continuous Learning:
• Eagerness to learn new processes and technologies, especially in fast-paced and ever-evolving environments.

Nice to Haves

• Experience in FinTech, TradFi, or customer-facing disciplines like technical program management or business operations.
• Knowledge of emerging technology risks, including crypto, cloud, mobile, and machine learning.
• Certifications: Relevant certifications such as CRISC, CISA, CISSP, CISM, or FAIR.
• Coding Knowledge: Understanding of data integrations and visualization tools.
• Crypto/blockchain/Web3 knowledge at a beginner/intermediate level.

Compensation

• Pay Range: $193,970—$228,200 USD annually.
• Additional Benefits: Full-time offers from Coinbase include bonuses, equity, and comprehensive benefits (medical, dental, vision, 401(k)).

Commitment to Equal Opportunity

Coinbase is an Equal Opportunity Employer committed to diversity and inclusion. All qualified applicants will be considered for employment without discrimination. Coinbase also participates in the E-Verify program as required by law.

Additional Information

• Accommodations: Coinbase provides reasonable accommodations for individuals with disabilities. If needed, contact accommodations@coinbase.com.
• Global Data Privacy Notice: Coinbase’s practices for managing applicant data are governed by GDPR and CCPA in applicable locations.

This role is designed for someone with a deep understanding of technology risk and a passion for building secure, risk-informed business practices within a rapidly evolving environment like Coinbase. If this aligns with your experience and goals, this could be a great opportunity!