Identify and assess technology and security risks across blockchain, cloud, and enterprise platforms.
Conduct security risk assessments across applications, infrastructure, cloud, and blockchain environments.
Identify control gaps and design, evaluate, and strengthen security controls.
Drive remediation of security findings, vulnerabilities, audit issues, and control deficiencies through closure.
Collaborate with engineering, architecture, and operations teams to integrate security into system design and delivery.
Perform threat modeling and participate in security architecture and solution reviews.
Support Identity and Access Management (IAM), secrets management, encryption, and key management practices.
Support internal audits, regulatory reviews, compliance assessments, evidence collection, and issue remediation.
Develop and maintain security policies, standards, procedures, and control documentation.
Monitor security risk metrics and report risk status to management.
Evaluate security risks and controls against established security frameworks.
Strong experience in security risk assessments, control evaluations, and remediation management.
Knowledge of NIST, ISO 27001, CIS Controls, COBIT, or similar security frameworks.
Understanding of cloud security principles and AWS, Azure, or Google Cloud Platform.
Strong knowledge of IAM, secrets management, encryption, and key management.
Hands-on experience supporting audits, regulatory assessments, and compliance reviews.
Knowledge of blockchain technologies, smart contracts, cryptography, and distributed ledger platforms.
Familiarity with Ethereum, Hyperledger Besu, Canton, Solana, or Polygon.
Proficiency in JavaScript/TypeScript frameworks such as React.js, Angular, or Vue.js.
Experience with Secure Software Development Lifecycle (SSDLC) and DevSecOps practices.
Experience integrating security controls into CI/CD pipelines.
Familiarity with Governance, Risk, and Compliance (GRC) platforms such as Archer, ServiceNow GRC, or MetricStream.
Strong understanding of security governance, risk management, and compliance requirements.
