Member of Information & Security

About Anchorage Digital:
Who we are

The Anchorage Village, what we call our team, brings together the brightest minds from platform security, financial services, and distributed ledger technology to provide the building blocks that empower institutions to safely participate in the evolving digital asset ecosystem. As a diverse team of more than 600 members, we are united in one common goal: building the future of finance by providing the foundation upon which value moves safely in the new global economy.

Anchorage Digital is committed to being a welcoming and inclusive workplace for everyone, and we are intentional about making sure people feel respected, supported, and connected at work regardless of who you are or where you come from. We value and celebrate our differences and we believe being open about who we are allows us to do the best work of our lives.

Anchorage Digital is an Equal Opportunity Employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or veteran status. Anchorage Digital considers qualified applicants regardless of criminal histories, consistent with other legal requirements. Anchorage Digital refers to services that are offered either through Anchorage Digital Bank National Association, an OCC-chartered national trust bank, or Anchorage Lending CA, LLC a finance lender licensed by the California Department of Financial Protection and Innovation, License No.

60

DBO-11976, or Anchorage Digital Singapore Pte Ltd, a Singapore private limited company, all wholly‑owned subsidiaries of Anchor Labs, Inc., a Delaware corporation.

Protecting your privacy rights is important to Anchorage Digital, and we work to maintain the trust and confidence of our clients when handling personal or financial information. Please see our privacy policy notices here.

• Expert knowledge and wide‑ranging experience with the regulatory and industry frameworks/standards/methodologies/technology: NIST 800‑53, NIST Cybersecurity Framework, ISO 27001, SOC 1/2, cloud environments, logical security, change management, and computer operations
• Ability to quickly grasp new technologies and systems, articulate related risks, develop and implement appropriate risk mitigating measures, and connect the dots between the company’s service offerings and products to the IT/Information Security environment
• Resolves a wide range of issues in creative ways to ensure regulatory requirements are being met, including managing and tracking findings (from risk assessments, audits, etc.) from identification to remediation
• Comprehension of core information security principles in order to reason and continuously improve the core Anchorage Digital security model
• Deep understanding of the IT threat landscape for the industry and cloud environments along with the ability to anticipate any impact on the business with the goal to drive a proactive response
• Excellent project management skills to support stability and successful execution in a very fast moving and cross‑functional environment

• Strategically guide the Global Information & Security Team in building and maintaining the overall Information Security and IT Risk Management Program
• Translate IT compliance and risk strategy into functional and actionable plans and guides execution. Accountable for results and implementing solutions with a longer term view that impact multiple functions across Anchorage Digital
• Lead and execute key team projects from start to finish, including but not limited to risk assessments, cybersecurity assessments, requirements mapping, and gap analyses
• Develop meaningful reporting, metrics, analysis, and controls commensurate with business needs and regulatory expectations
• Drive the maturity of the enterprise information security and IT risk management program commensurate with national and international standards (e.g. NIST, FFIEC, ISO, SOC
  2)
• Maintain entity controls and identify, report, and control incidents relevant to the services offered by the business lines and…