VP, Cybersecurity

Blockchains will only consider candidates who reside in the U.S. and do not require any VISA support.

OUR VISION

In the new and exciting world of the decentralized internet, otherwise known as Web3, it is an individual’s fundamental right to own and control their digital identity. To ensure that the individual is paramount in Web3, we are developing a suite of applications to enable everyone to safely engage, take part, and transact in the emerging, decentralized world of the internet. Our platform centers on Web3 Identity and leverages that identity to provide individuals with secure digital asset storage and recovery, access to decentralized finance, the ability to prove ownership of their creations, and gateways to digital interactions and experiences – all to empower and benefit every Web3 user.

We believe that the decentralized nature of Web3 creates an opportunity for everyone to challenge the digital status quo—to own and control their identity, data, finances, creations, and future. This is the chance to get it right – to rally a movement of individuals so Web3 belongs to everyone, not to trillion-dollar companies. To fulfill this vision, we are seeking dynamic people who want to join us in leading the way to this new world.

WHAT YOU WILL DO

The VP, Cybersecurity provides the direction and strategy for protecting the confidentiality and integrity of our platforms and our customers' data through policy management and application security. This role also ensures that a comprehensive Cyber Security program is effectively managed by leveraging industry best practices to protect and prevent threats based on business criticality and risk reduction. You will ensure that the cybersecurity program continues to mature by continuing to develop our cyber threat and operational capabilities, expanding our cloud security discipline, and driving down cybersecurity risk across all domains.

You will lead the development, implementation, and monitoring of enterprise-wide initiatives that include providing clear risk-mitigating directives. You will also lead the identification of security trends and evolving technologies to maintain knowledge of internal and external business environments.

You have a strong background in cybersecurity and technology life cycle deployment — including having in-house delivery, 3rd party management and cloud migration — will be important. Experience in strategy development and implementation of security and operational resilience programs and strong familiarity with core technology areas such as dev/sec/ops, identity and access management and multifactor authentication as well as exposure to production services and technical operations. Web3 experience is a huge plus.

Responsibilities include, but are not limited to:

• Driving Blockchains cybersecurity vision, continually updating strategy to meet this vision and maintain a multi-year roadmap.

• Developing trusted working partnerships within IT, Product Engineering, and Business Leaders
• Managing the overall secure application process across the development lifecycle.
• Leading the development, publishing, and compliance of up-to-date security policies, standards, and guidelines.
• Driving identification, assessment, and remediation of strategic cybersecurity risk and compliance.
• Proactively monitoring and escalating remediation of regulatory compliance and other risks.
• Communicating and creating ongoing awareness with business leaders regarding cybersecurity risks, concerns, and priorities.
• Ensuring rapid response to Cyber Security incidents from identification to eradication in the environment and advances the program based upon Incident postmortem learnings.

WHAT YOU WILL NEED TO SUCCEED

You have a deep understanding of the Cybersecurity and IT Security landscape, as a practitioner in progressively senior leadership positions.  You have strong familiarity with information security, risk management, and IT governance standards and frameworks (e.g., SOC2, ISO 27000, NIST 800-53, etc.) You possess knowledge of specific technologies associated with data protection, data governance, and artificial intelligence, as well as cloud technologies (IAAS, PAAS), directory, database, federation, authorization, message integrity, authentication, provisioning, mobility, mobile applications, etc. You have advanced comprehension of cryptography components, standards and protocols such as PKI, Key management (software and hardware-based), key lifecycle, digital certificates, SSL/TLS, SSH. You have a broad awareness of security protocols including identity (federated identity protocols), access management, application security, encryption (at rest, in transit, in use) and regulations including cyber security legislation practices, privacy, restrictions of geographic locations, etc.