Ready to do the most impactful work of your career? At Coinbase, we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase.
What you'll do:
- Own and lead Coinbase's global security audit portfolio covering IAM, threat detection, incident response, security architecture, cryptography/key management, vulnerability management, application security, and crypto-native security (wallets, cold storage), third-party/outsourced security oversight
- Partner with Security Engineering, Detection & Response, and AppSec teams as the cybersecurity subject matter expert, providing independent audit perspective and advisory value while maintaining third-line objectivity.
- Manage and develop a team of security auditors while personally leading high-complexity, high-risk security engagements across multiple jurisdictions.
- Synthesize complex technical security findings into clear, risk-prioritized reports for executive leadership, the Audit Committee, and the Board.
- Drive proactive identification of emerging threats, including crypto/blockchain attack vectors, AI/ML security risks, and supply chain risks, adjusting audit coverage and methodology accordingly.
- Champion security data analytics and AI tooling (e.g., automated log/evidence analysis) to modernize the security audit function.
- 12+ years in internal audit or security engineering/operations with demonstrated leadership of cybersecurity-focused audits or security programs, including direct team management while carrying an individual portfolio.
- Deep, hands-on expertise in at least 2-3 of: IAM, threat detection/SOC, incident response, security architecture, cryptography/key management, cloud security (AWS/GCP), or application security.
- Relevant security certification required: CISSP, CISM, CCSP, or CCSK (CISA a plus).
- Proven ability to navigate multi-jurisdictional cybersecurity regulatory regimes (NYDFS, SOC frameworks, OCC guidance, multi-state examiner requirements) and translate requirements into audit coverage.
- Demonstrated success communicating deeply technical security concepts to executive and Board-level audiences through written reports and presentations.
- Utilizes generative AI responsibly, maintaining human oversight to deliver business-ready outputs and drive measurable improvements in workflow efficiency, cost, and quality.
Req ID: #P76564
#LI-Remote
Pay Transparency Notice: Base salary varies by location (see range below). Total compensation may also include equity and bonus eligibility, and benefits (medical, dental, vision, 401(k)).
- Application Limit: Candidates may submit a maximum of 3 applications within a 6-month period.
- Equal Opportunity Employer: Coinbase is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or genetic information. Applicants with criminal histories will be considered consistent with applicable federal, state, and local laws.
- US Applicants: View Employee Rights, Know Your Rights, and E-Verify Notice of Participation.
- Accommodations: If you are an individual with a disability who needs a reasonable accommodation, email us your request and contact info at accommodations[at]coinbase.com. Need screen reading technology? Click here to download a free compatible screen reader and view the tutorial.
- Data Privacy & Arbitration: By submitting your application, you agree to our Candidate Privacy Notice. US applicants: By submitting your application, you agree to Arbitration of Disputes.
Skills Required
- 12+ years of internal audit experience with deep focus on IT and information security, or equivalent first-/second-line technology/security experience with audit exposure
- Proven experience owning end-to-end delivery of complex, cross-functional IT and security audits covering cloud infrastructure, security operations, IAM, data protection, and vendor/third-party risk
- Experience leading global, cross-functional IT audit portfolios across multiple regulatory jurisdictions (US, EMEA, APAC)
- Deep technical knowledge of cloud-based technology stacks, software development lifecycles (SDLC), cloud security configurations, and enterprise IT operations risks and controls
- Relevant professional certifications (e.g., CISA, CISSP, CIA, CPA)
- Working fluency with frameworks such as NIST, COBIT, and ITIL
- Proven leadership building, mentoring, and managing global audit teams, including co-sourced resources and indirect reports across time zones
- Experience partnering with first- and second-line risk, compliance, security, and technology teams to drive integrated assurance
- Experience shaping executive-level reporting and presenting audit findings and risk themes to senior management and Audit Committee
- Experience driving adoption of data analytics, automation, and generative AI to modernize audit execution, including continuous monitoring and automated evidence retrieval
What the Team is Saying
_0.png)
_0.png)
Coinbase Compensation & Benefits Highlights
How does Coinbase ensure its pay and bonus plans are competitive?
Coinbase uses a market-driven, pay-for-performance approach to keep pay and bonus plans competitive. Coinbase regularly benchmarks roles against leading technology and fintech companies using external market data and reviews its compensation programs on a recurring basis to ensure salary, bonus, and equity remain aligned with the broader market and business goals. Annual bonus and equity programs are tied to both company results and individual impact, so when Coinbase and its people perform, total rewards reflect that performance.
Coinbase Insights
What We Do
Crypto creates economic freedom by ensuring that people can participate fairly in the economy, and Coinbase (NASDAQ: COIN) is on a mission to increase economic freedom for more than 1 billion people. We’re updating the century-old financial system by providing a trusted platform that makes it easy for people and institutions to engage with crypto assets, including trading, staking, safekeeping, spending, and fast, free global transfers. We also provide critical infrastructure for onchain activity and support builders who share our vision that onchain is the new online. And together with the crypto community, we advocate for responsible rules to make the benefits of crypto available around the world.
Why Work With Us
We have the opportunity to accelerate the pace of innovation in the world by building an open financial system. Our vision is to create more economic freedom in the world, to help people control their own wealth, start companies, have financial privacy, and participate in the global economy. And to get us there, we focus, build and move as a team.
Gallery
Coinbase Teams
Coinbase Offices
Remote Workspace
Employees work remotely.
Coinbase is remote-first, which enables us to innovate, build and move quickly. Our teams are able to work effectively from around the globe with time for in-person offsites and team meetups to enhance collaboration and connection.
.png)
