Risk & Controls Manager - MetaMask (Consensys, Remote: United States, LATAM or EMEA)

Planning: operate the risk register from the Security Programme threat model, populate and track treatment, record acceptance decisions and manage the exceptions register. Maintain the ISMS and security policy library. Administer Drata as the control and evidence system. Execution: run critical control monitoring through health check-ins and drift flags. Feed threat-assessment findings into the register. Lead audit coordination for ISO 27001 and SOC 2, prepare management-review documentation and coordinate control registers for external testing. Tracking: monitor residual risk and exceptions against appetite. Report register state and evidence health to leadership and the Risk Committee.

Hands-on experience running risk registers, control libraries and audit cycles for ISO 27001 and/or SOC 2. GRC platform experience with Drata or an equivalent tool is required. Proven audit coordination ability, precise written communication and strong stakeholder management skills. A professional certification such as CISA, ISO 27001 Lead Implementer, Lead Auditor or equivalent is expected. Applications cannot be considered from candidates based in France, Italy or Germany.