Risk & Controls Manager

💼 Hiring: Risk & Controls Manager - Consensys (MetaMask) 📍 Remote - US, LATAM, EMEA (excl. France, Italy, Germany) | 🕐 Posted 4 days ago - September 24, 2026 | 💰 $150k-$206k USD (US; other regions vary) | 🧑‍💻 Full-time | 🔗 GRC / ISO 27001 / SOC 2 / Drata Consensys is hiring a Risk & Controls Manager to run MetaMask's internal posture engine covering the risk register, control monitoring, evidence, audit operations, and GRC tooling. The role keeps risk state current for the Lead and Risk Committee, with Drata as the register of record. 📋 Responsibilities include: - Operate the risk register from the Security Programme threat model, track treatment and acceptance, follow up owners, and run the exceptions register - Keep the ISMS and security policy library current; draft security standards when commissioned - Run Drata for controls and evidence, including Statement of Applicability, framework crosswalk, and automation - Monitor critical controls, route drift to the SOC, and maintain evidence for assessments and internal audit - Lead ISO 27001 and SOC 2 audit coordination, questionnaires, red-team/pentest controls, and residual-risk reporting 🔑 Requirements: - Hands-on experience running a risk register, control library, and audit cycle (ISO 27001 and/or SOC 2) - Comfortable with GRC platforms (Drata or equivalent) and turning monitoring into evidence - Proven ability to coordinate audits and customer questionnaires with named control owners - Precise written work and strong stakeholder management; CISA, ISO 27001 Lead Implementer or Auditor, or equivalent 📩 To apply: Complete the official form: https://job-boards.greenhouse.io/consensys/jobs/8207369 Applications from France, Italy, or Germany cannot be considered. 🔗 Original post: https://himalayas.app/companies/consensys-io/jobs/risk-controls-manager 💡 Understand DeFi Through a Real Product: Working with Web3 security or risk? STON.fi shows how non-custodial token swaps and user-controlled wallets execute on transparent on-chain rails. Review that live TON infrastructure at https://ston.fi 📌 New here? Subscribe and mute notifications to avoid noise. 🔎 Search by role or skill, or check the pinned messages for a short vacancy list. ⚠️ DYOR! I do not verify every job. Requests to download and run files or make a payment are major scam warning signs. 🚩 ❗️ I am not hiring. I only share fresh Web3 jobs posted by others. #NFA #DYOR 🌎 All my other social media! Subscribe!👇 💡 Intern/Junior Web3/Crypto/Blockchain Roles DAILY 📱 Allweb3jobs on Twitter/X 📱 Allweb3jobs on LinkedIn 📱 Coinmarketcap token analysis 🪙 Binance token analysis 💬 Want to promote something or just ask a question? Feel free to reach out: @crypto_vazima