VP, Tech Risk and Controls

📋 Description

• • Lead Coinbase’s global Technology Risk & Controls team, establishing and executing a robust second-line of defense framework that spans across critical technology and security functions. This includes, but is not limited to, cybersecurity, IT operations, enterprise architecture, data privacy, physical security, product development, engineering, and HR information systems.
• • Drive the integration of risk management principles and practices into the core operations of global product, engineering, legal, finance, sales, and operations teams. This involves proactively embedding security and privacy controls into product roadmaps and ensuring that new systems and processes are onboarded in alignment with compliance requirements.
• • Champion a culture of trust and resilience by ensuring Coinbase consistently meets the highest standards of compliance and regulatory readiness, while simultaneously fostering an environment that enables innovation and growth at scale.
• • Develop and implement comprehensive technology risk management strategies, policies, and procedures that align with Coinbase's business objectives and regulatory obligations.
• • Oversee the identification, assessment, and mitigation of technology-related risks, including but not limited to, cybersecurity threats, data breaches, system failures, and compliance violations.
• • Collaborate closely with Internal Audit, Operations Risk, and Enterprise Risk Management (ERM) teams to ensure a cohesive and effective risk management program across the organization.
• • Partner with product and engineering leaders to embed security and privacy by design principles into the entire product development lifecycle, from ideation to deployment and maintenance.
• • Build and maintain strong relationships with external regulators, auditors, and industry bodies to stay abreast of evolving risk landscapes and best practices.
• • Provide expert guidance and thought leadership on technology risk and controls to executive leadership and cross-functional teams.
• • Develop and manage the budget for the Technology Risk & Controls function, ensuring efficient allocation of resources.
• • Foster a high-performing team environment, attracting, developing, and retaining top talent in the field of technology risk and controls.
• • Implement and leverage data-driven approaches and automated solutions to enhance the efficiency and effectiveness of risk management processes, particularly within cloud environments.
• • Ensure that Coinbase's technology infrastructure and operations are secure, resilient, and compliant with all applicable laws, regulations, and industry standards.
• • Proactively identify emerging risks and trends in the technology and financial services sectors and develop strategies to address them.
• • Communicate complex risk and control concepts clearly and effectively to both technical and non-technical audiences, including senior executives, board members, and regulatory bodies.
• • Translate strategic vision into actionable plans and drive execution with a focus on measurable outcomes and continuous improvement.
• • Manage multiple priorities and projects simultaneously in a fast-paced, high-growth, and highly regulated environment, demonstrating resilience and a proactive approach to problem-solving.
• • Ensure that all technology risk and control activities support Coinbase's mission to increase economic freedom in the world by building a secure and trustworthy onchain platform.
• • Contribute to the overall strategic direction of Coinbase's security and compliance programs, ensuring alignment with business goals and the evolving regulatory landscape.
• • Drive continuous improvement initiatives within the Technology Risk & Controls function, seeking opportunities to optimize processes, tools, and methodologies.
• • Act as a trusted advisor to business leaders, helping them understand and manage technology-related risks in their respective areas.
• • Oversee the development and execution of risk assessments, control testing, and remediation plans.
• • Ensure that appropriate governance structures and reporting mechanisms are in place for technology risk and controls.
• • Stay current with advancements in technology, cybersecurity, and regulatory requirements relevant to the cryptocurrency and financial services industries.