Building the Future of Open FinancePayward - the parent company behind Kraken, NinjaTrader, Breakout, xStocks, Payward Services and CF Benchmarks - has spent the last 15 years building one of the most modern and globally accessible financial infrastructure platforms in the industry, built to advance an open, global financial system.
The teamFounded in 2011, Kraken is one of the world's longest-standing crypto platforms, trusted by over 10 million individuals and institutions across the globe. It offers spot trading, margin, futures, staking, and OTC services, with products built for both individual investors and institutional clients.
We are looking for a Deputy Regional Information Security Officer to own ICT security, operational resilience, and regulatory compliance across a portfolio of entities at different stages of maturity, from established licensed operations to new markets launching under frameworks. This is not a support function. You will be the named security officer for your entities, accountable to their boards and their regulators.
This is a high visibility, high trust role for a security governance professional who thrives at the intersection of technology, compliance, and financial services, and who is energised by applying established group frameworks to the local needs of a growing regulated entity.
Payward is one of the world's most trusted and secure digital asset platforms, operating across a growing network of regulated entities spanning Europe, the Middle East, and Asia Pacific. As we expand into new markets and deepen our regulatory footprint, the demand for embedded, senior-level ICT security leadership at the entity level has never been higher.
The opportunity* Prepare, contribute and report to regional risk governance and board committee meetings, highlighting control status, risk exposure, and readiness * Execute risk assessments and control testing across UAE operations in line with VARA cybersecurity guidelines and security best practices * Maintain and review Business Impact Assessments (BIA), integrating findings into global resilience planning * Contribute to Business Continuity Plan (BCP) documentation, testing, and updates, including entity-specific scenarios * Collaborate with Group Security and IT to: + Align UAE-specific regulatory controls with global policies and control frameworks + Contribute to the development of security policies to meet international and UAE compliance requirements
What You Will Do* Regulatory Governance + Serve as the named ICT security officer for your appointed entities, with formal accountability for security risk, ICT governance, and resilience oversight at board level + Prepare and present security, risk, and resilience materials to entity boards, with material review and coaching from the Global RISO Lead beforehand + Act as the primary point of contact for VARA and other relevant regulatory authorities on ICT and security matters -- including examinations, inspections, licensing interactions, and ongoing supervisory dialogue + Support entity go live processes by implementing and localizing established group ICT governance frameworks for new market launches, ensuring they meet UAE regulatory requirements and entity specific needs + As the portfolio evolves, engage with additional regulatory frameworks with support from the broader RISO team
Manage the classification, escalation, and regulatory reporting of ICT-related incidents within the timeframes required by applicable regulators
Operational Resilience
Maintain oversight of ICT third-party dependencies and outsourcing arrangements in line with regulatory requirements
Group Liaison
What You Bring
Why this role
Unless a specific application deadline is stated in the job posting, applications are accepted on an ongoing basis.Please note, applicants are permitted to redact or remove information on their resume that identifies age, date of birth, or dates of attendance at or graduation from an educational institution.We consider qualified applicants with criminal histories for employment on our team, assessing candidates in a manner consistent with the requirements of the San Francisco Fair Chance Ordinance.Our commitmentPayward is powered by people from around the world and we celebrate the diverse talents, backgrounds, contributions, and unique perspectives that everyone brings to the table. We hire based on merit, seeking out people with the right abilities, knowledge, and skills for the job. We encourage you to apply for roles where you don't fully meet the listed requirements, especially if you're passionate or knowledgeable about crypto.
We may ask candidates to complete job-related skills or work-style assessments as part of our hiring process. These assessments evaluate competencies relevant to the role and are applied consistently across candidates for similar positions. Results are considered alongside experience and interviews, and are not the sole basis for any employment decision.
As an equal opportunity employer, we don't tolerate discrimination or harassment of any kind, whether based on race, ethnicity, age, gender identity, citizenship, religion, sexual orientation, disability, pregnancy, veteran status, or any other protected characteristic as outlined by federal, state, or local laws.
Stay connectedFollow us on Twitter
Learn on the Kraken Blog
Connect on LinkedIn
Candidate Privacy Notice
