Easy Apply
Easy Apply
Lead Coinbase's global IT and security audit program, delivering complex cloud and security audits, managing a distributed audit team, coordinating cross-functional assurance, reporting to executives and the Audit Committee, and modernizing audit execution with data analytics, automation, and generative AI.
Ready to do the most impactful work of your career? At Coinbase, we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase.
Coinbase is looking for a Senior Manager, Security Audit to lead the Internal Audit team's global coverage of information security, cybersecurity, and infrastructure/application security. Reporting to the Global Head of Internal Audit, you'll own the security audit portfolio, spanning identity and access management, threat detection, incident response, cloud security, application security, and crypto-native controls (wallets, cold storage, key management), while managing a small team and carrying your own book of complex audits.
What you'll do:
- Own and lead Coinbase's global security audit portfolio covering IAM, threat detection, incident response, security architecture, cryptography/key management, vulnerability management, application security, and crypto-native security (wallets, cold storage), third-party/outsourced security oversight
- Partner with Security Engineering, Detection & Response, and AppSec teams as the cybersecurity subject matter expert, providing independent audit perspective and advisory value while maintaining third-line objectivity.
- Manage and develop a team of security auditors while personally leading high-complexity, high-risk security engagements across multiple jurisdictions.
- Synthesize complex technical security findings into clear, risk-prioritized reports for executive leadership, the Audit Committee, and the Board.
- Drive proactive identification of emerging threats, including crypto/blockchain attack vectors, AI/ML security risks, and supply chain risks, adjusting audit coverage and methodology accordingly.
- Champion security data analytics and AI tooling (e.g., automated log/evidence analysis) to modernize the security audit function.
Required Skills and Experience:
- 12+ years in internal audit or security engineering/operations with demonstrated leadership of cybersecurity-focused audits or security programs, including direct team management while carrying an individual portfolio.
- Deep, hands-on expertise in at least 2-3 of: IAM, threat detection/SOC, incident response, security architecture, cryptography/key management, cloud security (AWS/GCP), or application security.
- Relevant security certification required: CISSP, CISM, CCSP, or CCSK (CISA a plus).
- Proven ability to navigate multi-jurisdictional cybersecurity regulatory regimes (NYDFS, SOC frameworks, OCC guidance, multi-state examiner requirements) and translate requirements into audit coverage.
- Demonstrated success communicating deeply technical security concepts to executive and Board-level audiences through written reports and presentations.
- Utilizes generative AI responsibly, maintaining human oversight to deliver business-ready outputs and drive measurable improvements in workflow efficiency, cost, and quality.
Req ID: #P76564
#LI-Remote
Pay Transparency Notice: Base salary varies by location (see range below). Total compensation may also include equity and bonus eligibility, and benefits (medical, dental, vision, 401(k)).
Annual base salary range (excluding equity and bonus):
$201,365—$236,900 USD
- Application Limit: Candidates may submit a maximum of 3 applications within a 6-month period.
- Equal Opportunity Employer: Coinbase is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or genetic information. Applicants with criminal histories will be considered consistent with applicable federal, state, and local laws.
- US Applicants: View Employee Rights, Know Your Rights, and E-Verify Notice of Participation.
- Accommodations: If you are an individual with a disability who needs a reasonable accommodation, email us your request and contact info at accommodations[at]coinbase.com. Need screen reading technology? Click here to download a free compatible screen reader and view the tutorial.
- Data Privacy & Arbitration: By submitting your application, you agree to our Candidate Privacy Notice. US applicants: By submitting your application, you agree to Arbitration of Disputes.
Coinbase - TEST - GH API (EA YES) Fremont, California, USA Office
47800 Westinghouse Drive, Fremont, United States, 94539
Similar Jobs at Coinbase - TEST - GH API (EA YES)
Other
Lead architecture and roadmap for Coinbase's Compliance Reporting Data Platform. Build and own data models, pipelines, quality frameworks, and certification processes. Drive source data quality, partner with engineering and compliance teams, respond to audits and regulatory exams, and mentor engineers to create durable, auditable compliance data solutions.
Top Skills:
AirflowDatabricksDbtGenerative AiPythonSnowflakeSQL
3 Hours Ago
Easy Apply
Easy Apply
Other
Lead and improve FCM operating model for listed derivatives by designing scalable processes, controls, and tooling. Monitor operational stability and partner cross-functionally to translate business needs into well-controlled solutions. Drive launch readiness, automation, vendor management, and documentation while executing strategic initiatives to reduce manual effort and increase resilience in a regulated environment.
Top Skills:
Books And RecordsGenerative AiTrade Processing Systems
Other
Own and evolve on-chain smart contracts and backend services for issuing, reserving, minting/burning, and rewards for branded USDC-backed stablecoins. Drive architecture, partner with product/design, ship secure audited changes, and maintain high-quality, well-tested production systems.
Top Skills:
DefiEthereumEvmGenerative AiGoSmart ContractsSolidityStablecoinsUsdc
What you need to know about the San Francisco Tech Scene
San Francisco and the surrounding Bay Area attracts more startup funding than any other region in the world. Home to Stanford University and UC Berkeley, leading VC firms and several of the world’s most valuable companies, the Bay Area is the place to go for anyone looking to make it big in the tech industry. That said, San Francisco has a lot to offer beyond technology thanks to a thriving art and music scene, excellent food and a short drive to several of the country’s most beautiful recreational areas.
Key Facts About San Francisco Tech
- Number of Tech Workers: 365,500; 13.9% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Google, Apple, Salesforce, Meta
- Key Industries: Artificial intelligence, cloud computing, fintech, consumer technology, software
- Funding Landscape: $50.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Sequoia Capital, Andreessen Horowitz, Bessemer Venture Partners, Greylock Partners, Khosla Ventures, Kleiner Perkins
- Research Centers and Universities: Stanford University; University of California, Berkeley; University of San Francisco; Santa Clara University; Ames Research Center; Center for AI Safety; California Institute for Regenerative Medicine
