Compliance Owner

About the Role

The world of digital assets is accelerating in speed, magnitude, and complexity, opening the door to new ways for leveraging the blockchain. Fireblocks’ platform and network provide the simplest and most secure way for companies to work with digital assets and it trusted by some of the largest financial institutions, banks, globally-recognized brands, and Web3 companies in the world, including BNY Mellon, BNP Paribas, ANZ Bank, Revolut, and thousands more. SOC 1 Compliance Owner The world of digital assets is accelerating in speed, magnitude, and complexity, opening the door to new ways for leveraging the blockchain. Fireblocks' platform and network provide the simplest and most secure way for companies to work with digital assets, and it's trusted by some of the largest financial institutions, banks, globally-recognized brands, and Web3 companies in the world, including BNY Mellon, BNP Paribas, ANZ Bank, Revolut, and thousands more. Making Compliance Real-As our SOC 1 Compliance Owner, you'll own the SOC 1 Type II program end-to-end across TRES and our corporate environment. This is a senior, fully hands-on role: you don't just design the control framework, you run it — collecting the evidence, defining the requirements, sitting on the calls with auditors and customers, and closing the gaps yourself. Your first priority is leading the transition to our new external auditor without dropping a single control in the process. From there, you keep the program audit-ready year-round rather than scrambling at cycle time. If you believe compliance should be practical, evidence-backed, and embedded in how the business actually operates — not a binder that gets opened once a year — we want you on the team. What the Role Looks Like You will be the single owner of the SOC 1 control environment, accountable for the program from evidence through report issuance: - Own the evidence: Personally collect, label, and file control evidence and screenshots. Maintain an audit-ready repository that stays current all year, not just at cycle time. - Define the requirements: Translate each control objective into testable specifications for Engineering, Infrastructure, Security, HR, and Finance. Identify gaps and drive them closed. - Run the auditor relationship: Act as the primary contact for our external auditors. Manage the auditor transition, scoping, walkthroughs, PBC and sample requests, evidence delivery, and resolution of deviations. - Represent us to customers: Lead customer-facing calls on the SOC 1 control environment, answer control questions directly, and confirm complementary user-entity controls (IP allowlisting, MFA, access approvals, authorized-user lists). - Execute the recurring controls: Run the operating cadence — weekly reconciliation minutes; quarterly access reviews; and the annual cycle covering penetration testing, cloud (AWS) SOC report review, board minutes, performance evaluations, and security training, including 30-day new-hire... (View official application link for full details)

Responsibilities

Requirements

Benefits