Senior Manager, Identity Governance

Crypto.comSofiaPosted 1 day ago

Security / ITHybridFull-timeBulgaria

Job Description

About the Team

The Identity Governance team is responsible for managing the services and controls that deliver stable, secure, and efficient Identity & Access Management (IAM) across Crypto.com and its related entities. IAM controls are foundational to the organisation, ensuring the right individuals have the right access to the right resources, backed by robust audit trails.

Role overview

You'll lead a globally distributed Identity Governance team, owning the controls, risk assessments, and compliance posture that keep Crypto.com's identity ecosystem audit-ready. You'll set direction for your team's day-to-day work while staying hands-on with the highest-stakes risk assessments and stakeholder relationships yourself.

Responsibilities:

Manage and develop the Identity Governance team spanning APAC and EU time zones — set priorities, review work quality, and support career growth across the team.

Establish, manage, and document effective IAM controls, including the evaluation, testing, and rollout of a new group-wide Identity and Access Management platform.

Identify, assess, and document identity-related risks across key business processes.

Manage identity lifecycle risks in alignment with the Operational Risk Management Framework.

Partner with business, risk management, and compliance stakeholders to maintain compliance with Group Policies, risk standards, and regulatory obligations.

Foster a strong risk and control culture across key business functions.

Lead process deep-dive activities to map workflows, evaluate existing risks and controls, and identify control gaps.

Coordinate across APAC, EU, and US working hours to ensure consistent stakeholder engagement.

What success looks like:

Control gaps identified in process deep-dives are closed within an agreed SLA.

Team operates with clear ownership and consistent quality across regions.

Clean audit outcomes on IAM-related controls.

Requirement:

5+ years of experience in Identity and Access Management, information security, or risk & controls, ideally within financial services, an enterprise corporate environment, or a risk/compliance function supporting large-scale IT/Identity systems.

Background in Operational Risk, Product Risk, Compliance, or Audit.

Experience managing or mentoring a small team, including across distributed time zones.

Strong understanding of Information Technology risks and internal controls.

Demonstrated track record of identifying, analysing, and mitigating operational and security risks.

Strong stakeholder management, communication, and cross-functional collaboration skills.

Preferred:

Experience designing or evaluating identity governance platforms/tooling.

Familiarity with financial-services regulatory frameworks.

Additional Information

Our Security Team
At Crypto.com, our dedication to user security is led by our highly experienced Security Team. Comprising an international roster of seasoned cybersecurity experts, our team leads the company's Security, Privacy, and Security Compliance endeavors.

The team includes holders of international patents for technologies integrated in our security architecture. Under the stewardship of a distinguished CISO recognized by the Forbes Technology Council and among the Global Top 100 CISOs, our team has consistently championed industry standards, acquiring certifications like ISO27001, ISO27701, ISO22301, ISO42001, PCI:DSS 3.2.1 (Level 1), NIST Tier 4, and SOC 2 Type II, in addition to the MPI License from Singapore MAS. Our Chief Information Security Officer reports directly to the CEO, underscoring the prioritization of security in our organization's hierarchy.

Our Security Team not only places great emphasis on credentials and expertise but also deeply values hands-on experience, rapid cognition, and dynamic learning. The challenges in the world of crypto are ever-evolving, and as such, our team prides itself on quick adaptability and robust teamwork, ensuring that we stay ahead of potential threats and always safeguard our user base.

#LI-CY2

Job descriptions are sourced from publicly available company career pages via their official APIs. All trademarks and content belong to their respective owners. If you are a company representative and would like to modify or remove this listing, please contact us.