New York, United States

Who We Are:

At Galaxy we are building products and services to help the world invest in economic progress. We believe crypto and blockchain innovations will permeate and improve all aspects of our global economy. Our vision is a society where value and ownership flow as freely as information. Galaxy is a digital asset and blockchain leader helping institutions, startups, and individuals access and navigate the crypto economy. As one of the most well-capitalized and trusted companies in the industry, we provide platform solutions custom-made for a digitally native ecosystem across three complementary operating businesses: Global Markets, Asset Management, and Digital Infrastructure Solutions. Our offerings include, amongst others, trading, lending, strategic advisory services, institutional-grade investment solutions across passive, active and venture strategies, proprietary bitcoin mining and hosting services, network validator services, and the development of enterprise custodial technology. Galaxy’s CEO and Founder Michael Novogratz leads a team of crypto enthusiasts, and institutional veterans focused on the future of finance and Web3. The Company is headquartered in New York City, with global across North America, Europe and Asia.

Additional information about the Company's businesses and products is available on www.galaxy.com.

What We Value:

We are a diverse team of free thinkers, and fast movers united to help investors and creators energize the global economy. We are looking for individuals who thrive in a culture of builders and overachievers and embrace high performance, transparent feedback, and a mission-first approach. Our culture shapes our way of working and gets us where we want to be.

Seek Excellence.
Be Selective To Be Effective.
Be Highly Aligned, Loosely Coupled.
Disagree Transparently.
Encourage Independent Decision-Making.
Build Dream Teams.

Who You Are:

Galaxy is looking for an Information Security Risk Manager to play a critical role in protecting our technology and digital assets.

What You’ll Do:

Assist in developing standards and best practices to enable effective and efficient GRC processes
Complete third-party supplier risk assessments to optimize the process ensuring supply chain risk is managed effectively throughout the supplier's lifecycle
Execute cybersecurity risk assessments, compile risk registers, and track risk remediation plans
Assist in responding to customer requests for information on our security measures
Assist with the evaluation of the effectiveness of the information security program by monitoring, gathering, and analyzing information security and compliance metrics for management
Maintain compliance frameworks, policies, procedures and controls to meet the requirements of SOC1, SOC2 and other relevant standards

What We’re Looking For:

Bachelor’s degree with at least 5+ years of experience in information security, GRC, IT Audit, compliance assisting an organization in working towards SOC1, SOC2 compliance
Relevant certifications (e.g., CISA, CISSP, CISM) preferred

Bonus Points:

Experience performing cyber security risk assessments
Experience working towards SOC1, SOC2 or ISO27001 certification
Familiarity and understanding of CIS Top 20, New York Department of Financial Services 23 NYCRR500 Regulation (‘NYDFS’), NIST
Hands on working style and willing to contribute to the team beyond your traditional management job responsibilities
Comfortable with ambiguity; ability to create clarity and understanding.
Experienced in getting to “yes” in a collaborative, consensus driven environment
Enjoys operating in a fast-paced and demanding environment
A direct and open communication style; creative, out-of-the-box thinker who can translate concepts and ideas to broader audience
Ability to work successfully as an individual contributor or as a team leader
Organized with attention to detail; proven ability to conceptualize, plan, and execute ideas while providing training and skills transfer to others

What We Offer:

Competitive base salary and discretionary bonus
Flexible Time Off (i.e. unlimited paid vacation days)
Company paid Holidays (11)
Company paid sick leave
Company-paid health and protective benefits for employees, partners, and other dependents
3% 401(k) company contribution
Generous paid Parental Leave
Free virtual coaching and counseling sessions through Ginger
Opportunities to learn about the Crypto industry
Free daily snacks in-office
Smart, entrepreneurial, and fun colleagues
Employee Resource Groups

Apply now and join us on our mission to engineer a new economic paradigm.

The base salary ranges included below will be commensurate with candidate experience, expertise and local market. Final offer amounts are determined by multiple factors, including candidate experience and expertise. At Galaxy, we maintain a total compensation philosophy which consists of a competitive base salary, annual bonus, and equity incentives.

Base Salary Range

$140,000—$175,000 USD

Galaxy respects diversity and seeks to provide equal employment opportunities to all employees and job applicants for employment without regard to actual or perceived age, race, color, creed, religion, sex or gender (including pregnancy, childbirth, lactation and related medical conditions), gender identity or gender expression (including transgender status), sexual orientation, marital or partnership or caregiver status, ancestry, national origin, citizenship status, disability, military or veteran status, protected medical condition as defined by applicable state or local law, genetic information or predisposing genetic characteristic, or other characteristic protected by applicable federal, state, or local laws and ordinances.

We will endeavor to make a reasonable accommodation to the known limitations of a qualified applicant with a disability unless the accommodation would impose an undue hardship on the operation of our business. If you believe you require such assistance to complete the application process or to participate in an interview, please contact [email protected].

Apply for this job

Galaxy Digital Services is hiring an

Associate, Information Security Risk Manager