At a Glance
- Tasks: Ensure MoonPay's compliance and security by assessing internal controls and recommending improvements.
- Company: Join a leading platform in the crypto space, empowering users with digital finance.
- Benefits: Enjoy competitive salary, unlimited holidays, hybrid work, and equity opportunities.
- Other info: Diverse and inclusive workplace committed to employee growth and well-being.
- Why this job: Be part of a mission to enhance security in the blockchain and payments industry.
- Qualifications: 3-5 years in Governance, Risk, and Compliance with strong analytical skills.
The predicted salary is between 56700 - 69300 £ per year.
About Moon Pay – we’re Moon Pay.
We’re here to onboard the world to the decentralized economy by making digital money move as universally and effortlessly as the internet.
Crypto, stablecoins, and blockchain are tools for global financial empowerment, giving people and businesses more control over their money and digital assets.
Moon Pay is a unified payments platform that makes buying, selling, swapping, and paying in digital currencies as easy as sending an email.
We power the entire flow between fiat and crypto end‑to‑end, with compliance, identity checks, fraud prevention, and settlement built in.
Trusted by over 30 million customers and more than 500 ecosystem partners, our secure, enterprise‑grade platform is driving mainstream crypto adoption worldwide.
Fully licensed in the U.
S. and regulated across the UK, EU, Canada, and Australia, we are committed to trust and compliance while delivering a consumer app that is accessible, intuitive, and growing fast.
About the Opportunity ✍️
The Information Security Audit team at Moon Pay is dedicated to verifying the security and integrity of our internal systems and data.
The GRC Analyst’s mission is to provide independent, objective assurance and consulting principles to improve Moon Pay’s regulatory compliance program.
In collaboration with IT, People Ops, Compliance, Legal, and Procurement, you will report to the Director of Information Security Audit & ISMS Program and work with TSS and Engineering teams to collect and review evidence in support of our compliance audits.
Key responsibilities
- Assessing the company’s internal control structure, risk management, and governance processes to confirm they work as intended.
- Identifying opportunities to improve Moon Pay’s efficiency and effectiveness by recommending solutions to management.
- Safeguarding assets, ensuring compliance with laws and policies, and identifying potential fraud or other concerns.
- Acting as an advisor to team members, providing insight and helping enhance the overall control environment and operational performance.
- Promoting a culture of integrity and accountability throughout the organization.
- Joining us in our commitment to security excellence and helping build a safer future in the blockchain and payments industry.
What you will do
- Become fully knowledgeable with compliance frameworks such as SOC 2, ISO 27001, 27701, 27018, PCI‑DSS, NIST 800‑171, Mi CA, and DORA.
- Familiarize yourself with scheduling intervals for each framework.
- Assist team members in gathering evidence to support our compliance program.
- Review evidence critically, identify risks, and recommend counter‑measures or process revisions.
- Advise internal teams on findings, enabling remedial action before external audits.
- Safeguard assets by ensuring the team understands security requirements.
About You
- Minimum of 3‑5 years in Governance, Risk, and Compliance.
- Experience with IT Operations, Secure Development, Change Management, Access Control, and Information Security.
- Performed reviews under at least two of the following: ISO 27001, SOC 2, SOX 404A/B, or PCI‑DSS.
- Strong understanding of cybersecurity principles and best practices.
- Excellent critical thinking, analytical, and problem‑solving skills.
- Ability to demonstrate completeness and accuracy when providing evidence to audit teams.
- Organization skills to manage large amounts of documentation and evidence.
- Capacity to work effectively under pressure and handle multiple audit reviews simultaneously.
- Strong communication and interpersonal skills.
- Bonus Qualifications & Certifications
- CISSP, CISM, or equivalent certifications.
- Technical Proficiency
- Proven experience with tools such as Google Workspace, Mac OS, Share Point/GRC Platforms, Okta/Active Directory, Jira/Linear.
- Ability to understand a variety of technology platforms and identify evidence to collect.
- Values
- Be Hungry
- Level Up
- Own It
- Crypto Curious
- Kaizen
Benefits & Perks
Competitive salary package with equity components, performance equity bonuses, and a “Moonshot” award offering $250,000 equity grants to 10 employees twice a year.
Unlimited holidays, hybrid working schedule, private healthcare benefits, enhanced parental leave, annual training budget, home office setup allowance, remote working allowance, a monthly budget for our products, an employee referral program offering 10K USDC, and regular remote company offsites.
Commitment To Diversity
Moon Pay believes every voice matters.
We foster a respectful environment free from harassment, racism, and discrimination.
We are a proud equal‑opportunity employer and commit to inclusivity for all employees, including providing reasonable accommodations for qualified individuals with disabilities and adhering to non‑discriminatory hiring practices.
Listed in: Crypto Jobs, Web3 Crypto Jobs, Developer Web3 Jobs, Engineering Web3 Jobs, Analyst Crypto Jobs, Non Tech Web3 Jobs, Remote Crypto Jobs, Legal Crypto Jobs, Compliance Web3 Jobs, Security Crypto Jobs, Operations Crypto Jobs, Director Web3 Jobs, Move Crypto Jobs, Data Crypto Jobs, AI Web3 Jobs, Policy Crypto Jobs, Full Time Crypto Jobs.
#J-18808-Ljbffr
InfoSec GRC Analyst employer: Crypto Pro Network
As a leading crypto trading firm located in the vibrant Greater London area, we pride ourselves on fostering a dynamic and innovative work culture that encourages independent thinking and collaboration. Our employees benefit from competitive compensation packages, ongoing professional development opportunities, and the chance to work with cutting-edge technology in a rapidly evolving market. Join us to be part of a forward-thinking team where your expertise in crypto trading can truly make an impact.
StudySmarter Expert Advice🤫
We think this is how you could land InfoSec GRC Analyst
✨Get Involved in the Cybersecurity Community
Diving into the cybersecurity community is key for landing that full-time gig. Join forums like Reddit's r/cybersecurity or attend local meetups to connect with industry veterans and other job seekers. Networking is everything in this field—don’t just be a passive lurker!
✨Show Off Your Skills with Capture the Flag Competitions
Participate in Capture the Flag (CTF) competitions; these are not just a fun way to boost your skills but also a chance to showcase your talent to potential employers. Many companies, including Crypto Pro Network, love seeing candidates who actively engage in these challenges.
✨Tailor Your Online Presence
Make sure your LinkedIn and any professional profiles reflect your cybersecurity expertise. Share your projects, whether they’re personal or from a previous role, to catch the eye of hiring managers. This is how they’ll find your passion and commitment to the field!
✨Apply Directly Through Crypto Pro Network
Don’t forget to head straight to our website and check out any openings for cybersecurity roles at Crypto Pro Network. Applying directly can sometimes give you an edge, especially if you can mention that you've been following our work or engaging in the community.
We think you need these skills to ace InfoSec GRC Analyst
Some tips for your application 🫡
Show off your technical skills:In cybersecurity, it's crucial to highlight your technical prowess. Make sure your CV showcases specific skills like network security, penetration testing, or threat analysis. If you have relevant certifications (like CEH or CISSP), pop those on the front page to grab attention!
Tailor your portfolio for the role:Even for a full-time role, a portfolio can set you apart. If you've worked on any cybersecurity projects—be it CTF challenges, security assessments, or research papers—include these in your application. This demonstrates not just your skills, but also your hands-on experience!
Use real-world examples:When writing your cover letter, don’t just stick to your qualifications. Share real-world examples of how you’ve tackled security issues or vulnerabilities. This gives the hiring team at Crypto Pro Network insight into your practical problem-solving abilities and makes your application memorable.
Demonstrate your passion for cybersecurity:Cybersecurity is an ever-evolving field, so show us that you’re always learning! Mention any recent courses, webinars, or industry events you’ve attended. This not only exhibits your enthusiasm but also signals to Crypto Pro Network that you’re committed to staying ahead in the game.
How to prepare for a job interview at Crypto Pro Network
✨Sharpen Your Technical Skills
For a role in cybersecurity, it’s essential to be up-to-date with the latest tools and techniques. Brush up on your knowledge of firewalls, intrusion detection systems, and vulnerability assessment tools. Be ready to discuss specific scenarios where you’ve applied these skills, as hands-on experience can really set us apart in interviews.
✨Prepare for Scenario-Based Questions
Expect the interviewers at Crypto Pro Network to throw in some hypothetical situations to see how you’d handle them. Think about common security breaches or incidents and be prepared to explain how you would respond. This not only shows your problem-solving skills but also your understanding of real-world cybersecurity challenges.
✨Highlight Your Certifications
Certifications like CompTIA Security+, CISSP, or CEH can give you a significant edge in a full-time role in cybersecurity. Make sure to mention these during your interview and be prepared to discuss what you learned through those certifications and how they relate to the position at Crypto Pro Network.
✨Show Your Passion for Cybersecurity
Since you’re going for a full-time gig, showing genuine enthusiasm for the field can make all the difference. Share any personal projects, blogs, or communities you’re part of that relate to cybersecurity. This not only showcases your passion but also your commitment to staying engaged in this ever-evolving field.
