Role overview
About the Company
Gemini is a global crypto and Web3 platform founded by Cameron and Tyler Winklevoss in 2014, offering a wide range of simple, reliable, and secure crypto products and services to individuals and institutions in over 70 countries. Our mission is to unlock the next era of financial, creative, and personal freedom by providing trusted access to the decentralized future. We envision a world where crypto reshapes the global financial system, internet, and money to create greater choice, independence, and opportunity for all â bridging traditional finance with the emerging cryptoeconomy in a way that is more open, fair, and secure. As a publicly traded company, Gemini is poised to accelerate this vision with greater scale, reach, and impact.
The Department: Security Governance, Risk & Compliance (GRC)
What you'll work on
- Ownership & Accountability: Lead, manage, and be accountable for PCI, ISO 27001, NYDFS, and SOC II compliance programs.
- Audit Planning & Execution: Develop and oversee project plans for internal and external audits, ensuring timely execution and alignment with compliance requirements.
- Operational Excellence: Drive continuous improvement in security compliance operations by implementing efficient and scalable processes.
- Regulatory & Audit Coordination: Oversee security audits, and regulatory compliance initiatives.
- Automation & Efficiency: In partnership with technology teams, assist in streamlining evidence collection, automate security enforcement, and optimize compliance workflows.
- Leadership & Team Development: Mentor and guide a team, fostering a strong risk management culture and ensuring best practices.
- Executive Communication: Present compliance status, risk assessments, and mitigation strategies to senior leadership.
- Cross-functional Collaboration: Align compliance goals with business objectives and coordinate efforts across multiple teams.
What we're looking for
- Bachelorâs degree and equivalent practical experience in cybersecurity compliance risk management.
- Minimum of 8 years of experience in cybersecurity compliance with a focus on regulatory frameworks.
- Proven expertise in managing NYDFS, PCI, ISO 27001, and SOC II compliance.
- Exceptional project management skills, with the ability to prioritize and balance multiple initiatives effectively.
- Strong analytical, problem-solving, and communication skills, capable of interfacing with senior executives.