Information Security Officer (ISO) / GRC cybersecurity Lead

Full time - Paris or full remote from Western EU

Kiln is now part of the prestigious French Government program #FT120 from La French Tech! 🎉 🇫🇷

The Information Security Officer supports Kiln’s VP of Security in defining and executing the company’s information security program. Acting as the GRC (Governance, Risk & Compliance) lead, the ISO aligns security strategy with business goals and regulatory standards. The role includes leading risk assessments, compliance initiatives, KPI development, and driving a strong security culture across the organization.

Responsibilities

Program Leadership & Governance

• Design and run a scalable security program aligned with Kiln’s growth, web3 operations, and evolving regulations.

• Develop and maintain the security framework (policies, standards, and processes).

• Define and track KPIs/OKRs; present security posture to leadership.

• Lead risk management activities, including enterprise, vendor, and emerging threat assessments.

• Maintain the risk register and oversee audit readiness (SOC 2, ISO 27001).

Vendor & Third-Party Risk

• Build and manage the vendor security program, including due diligence, monitoring, and contractual controls.

• Oversee third-party incident coordination and mitigation.

Security Awareness & Incident Management

• Promote a security-first culture through training and awareness programs.

• Manage incident response planning and execution; lead post-incident reviews to improve resilience.

Regulatory Compliance

• Establish compliance monitoring programs to ensure ongoing adherence to applicable laws, regulations, and industry standards.

• Partner with legal and compliance teams to ensure continuous adherence to standards.

Profile

Required

• Bachelor’s or Master’s in Computer Science or Information Security.

• 8+ years in information security, with strong GRC experience in regulated or high-growth environments.

• Proven record of building and scaling security programs.

• Knowledge of ISO 27001, SOC 2, GDPR, and risk management frameworks.

• Experience with third-party risk, cloud/infrastructure security, and compliance metrics.

Nice to Have

• Background in blockchain, digital assets, or fintech.

• Familiarity with web3 infrastructure, smart contracts, and DevSecOps practices.

• Knowledge of compliance platforms (e.g., Vanta, Drata).

• Certifications such as CRISC, CISM, CISSP, or ISO 27001 Lead Implementer.

About Kiln:

Kiln is the leading enterprise-grade rewards platform that enables institutional customers to stake assets and integrate staking & DeFi functionality into their offerings. Our API-first platform provides fully automated validators, staking & DeFi protocols access, and comprehensive data and commission management.

With $13+ billion in crypto assets staked through our platform, Kiln has established a strong presence on Ethereum, managing over 5.4% of the network through 50,000+ validators — all with zero slashing events.

Kiln serves more than 140 leading customers, including Binance, BitPanda, Bitgo, Fireblocks, VanEck, and TrustWallet.

Our team of 100 ecosystem enthusiasts brings experience from industry leaders like Google, Circle, Ledger, Chainalysis, and other prominent technology and cryptocurrency companies.

We've raised $30M in total funding from prominent investors including 1kx, Crypto.com, Illuminate Financial, Consensys, Wintermute, Kraken Ventures...

Join Kiln and help us make the web more secure, stable, decentralized, and fair!

How Kiln will support you:

At Kiln, our values drive us: Technical Excellence ensures top security and usability; Innovation-Driven Meritocracy elevates groundbreaking ideas; Trust and Transparency build reliability through open communication; and People First keeps our team and clients at the heart of everything we do.