Deputy Regional Information Security Officer

Kraken is seeking a Deputy Regional Information Security Officer to own ICT security, operational resilience, and regulatory compliance across a portfolio of entities in the United Arab Emirates. This high visibility role is for a security governance professional who thrives at the intersection of technology, compliance, and financial services. Join us to accelerate the global adoption of crypto and help people own the power of their money.

Kraken, the parent company Payward, is a global financial platform offering crypto, stocks, futures, staking, and payments. Trusted by millions, we are building the future of open finance and are looking for passionate individuals to join our mission.

Company Overview

Kraken, founded in 2011, is one of the world's longest-standing crypto platforms, now offering crypto, stocks, futures, staking, and payments. Trusted by millions of institutions, professional traders, and consumers across 190+ countries, Kraken is dedicated to accelerating the global adoption of crypto so everyone can achieve financial freedom and inclusion. Payward is committed to building one of the most modern and globally accessible financial infrastructure platforms.

Quick Details

• Salary Range: Not Applicable
• Job Type: Full-time
• Qualifications: Professional Certifications (CISSP, CISM, CRISC, CISA, or ISO27001 Lead Implementer preferred)
• Experience: 7+ years of experience in information security governance, ICT risk management, or regulatory compliance in a regulated financial services, fintech, or virtual asset environment

Key Responsibilities

• Serve as the named ICT security officer for appointed entities, with accountability for security risk, ICT governance, and resilience oversight at board level.
• Prepare and present security, risk, and resilience materials to entity boards.
• Act as the primary point of contact for VARA and other relevant regulatory authorities on ICT and security matters.
• Lead ICT and security risk assessments for appointed entities, escalating material risks.
• Manage the classification, escalation, and regulatory reporting of ICT-related incidents.

Requirements

• 7+ years of experience in information security governance, ICT risk management, or regulatory compliance in a regulated financial services, fintech, or virtual asset environment.
• Direct experience as a named regulatory contact, involvement in regulatory examinations, supervisory interactions, licensing processes, or equivalent.
• Familiarity with UAE regulatory frameworks; experience with VARA or other virtual asset / crypto-native regulatory regimes is a significant advantage.
• Demonstrated ability to implement, adapt, and maintain compliance or governance frameworks within a regulated environment.
• Strong project management skills and the ability to drive outcomes across cross-functional, globally distributed teams.

Benefits

• Hold a named role within a regulated entity with accountability and board-level visibility.
• Operate at the frontier of virtual asset regulation, shaping how Kraken meets VARA requirements.
• Build ICT governance programs from scratch for new market entries.
• Exposure to local governance forums, regulators, and senior stakeholders.
• Join a remote-first, international team shaping the future of crypto asset governance and resilience.