Blockchains will only consider candidates who reside in the U.S. and do not require any VISA support. OUR VISION In the transformative world of Web3, it is an individual’s fundamental right to own and control their digital identity. To ensure that the individual is paramount in Web3, we are developing tools that enable everyone to engage and transact online in a safe and trusted way. Individuals are in control of what information they choose to share and with whom they choose to share it. We are developing a pioneering platform that combines the power of social experiences with Web3 Identity. This platform will provide individuals with access to interactive 3D experiences, verified communities, trusted transactions, the ability to prove ownership of their creations, and visibility and control over the data collected about them -- all designed to empower and benefit every Web3 user. We believe that the decentralized nature of Web3 creates an opportunity for everyone to challenge the digital status quo—to own and control their identity, data, finances, creations, and future. This is the chance to get it right – to rally a movement of individuals focused on ensuring that Web3 belongs to everyone, not just to trillion-dollar companies. To fulfill this vision, we are seeking dynamic people who want to join us in leading the way to this new world. WHAT YOU WILL DO As Cybersecurity Program Manager, you possess strong governance, risk, and compliance. You will facilitate and lead the following activities and initiatives: Writing, assessing, and validating cybersecurity policies, standards, and processes to support adoption of NIST CSF and NIST 800-53 programs. Designing and documenting technical, administrative, and procedural controls that align to cybersecurity framework adoption, compliance certification, and best practices. Creating documentation to provide cybersecurity reporting and measurement of metrics, key performance indicators, and key risk indicators. Participating and leading cybersecurity strategy and tactical planning. Leading cybersecurity program assessments for NIST CSF maturity evaluation. Leading the establishment of SOC2 policy controls and preparing Blockchains for certification. Working as the primary SME for implementation and audits of SOC2 Type II and ISO27001 readiness assessments and certifications. Identifying gaps remediation actions, working with key stakeholders, control owners. Leading efforts in implementing policies and procedures by working proactively across the organization to understand capabilities, limitations, and defining implementation objectives. Overseeing security control implementations, defining project objectives and milestones, working cross-functionally to accomplish successful technology deployments in partnership cross functionally with key stakeholders. Coordinating technical assessments, penetration testing, red teaming, and incident response table-top exercises. Tracking and monitoring vulnerability remediation activities and ensuring the technical team deploys patches and configuration changes within SLA. Supporting answering our Partners/Customers cybersecurity questions. Managing other cybersecurity initiatives as defined as needed by the business teams. WHAT YOU WILL NEED TO SUCCEED This is a hands-on, part technical part governance, role in planning and organizing the cybersecurity program for Blockchains. To be successful, you must have an analytical mindset with excellent organizational skills. You will have outstanding communication and interpersonal skills and can proactively communicate with multiple stakeholders including executive and technical focused professionals. You have demonstrable knowledge of cybersecurity risk management, compliance experience with SOC2 Type 2 and ISO 27001, and implementation of industry standards such as NIST CSF and 800-53. Knowledge of GDPR and other international data transfer requirements is preferred. The role will also require demonstrable knowledge and/or certification in any or all of the following areas: Privacy by Design, Risk Assessment, Security Awareness Training, Incident Response, Security Operations, Threat & Vulnerability Management, and Identity & Access Management. YOUR EDUCATION AND EXPERIENCE You have a bachelor’s degree. You have 5+ years of experience in a security or cybersecurity role and 3+ years of experience in a program or project management role. You have experience directly leading projects to achieve and maintain certifications and working with both on-prem and cloud environments. Blockchains, Inc. (“Blockchains”) is proud to be a diverse workforce, and we are committed to inclusion and diversity to ensure equal opportunity for all applicants. Blockchains provides equal employment opportunities to all employees and applicants regardless of race, color, religion, sex, sexual orientation, gender identity and/or expression, national origin, age, marital status, physical or mental disability, veteran status, or any other characteristic protected by federal, state, or local laws. When you apply to a job on this site, the personal data contained in your application will be collected by Blockchains, Inc. (“Controller”), which is located at 610 Waltham Way, Sparks, NV 89437 and can be contacted by emailing privacy@blockchains.com. Controller’s data protection officer is Edward O'Connor, who can be contacted at privacy@blockchains.com. Your personal data will be processed for the purposes of managing Controller’s recruitment related activities, which include setting up and conducting interviews and tests for applicants, evaluating and assessing the results thereto, and as is otherwise needed in the recruitment and hiring processes. Such processing is legally permissible under Art. 6(1)(f) of Regulation (EU) 2016/679 (General Data Protection Regulation) as necessary for the purposes of the legitimate interests pursued by the Controller, which are the solicitation, evaluation, and selection of applicants for employment. Your personal data will be shared with Greenhouse Software, Inc., a cloud services provider located in the United States of America and engaged by Controller to help manage its recruitment and hiring process on Controller’s behalf. Accordingly, if you are located outside of the United States, your personal data will be transferred to the United States once you submit it through this site. Because the European Union Commission has determined that United States data privacy laws do not ensure an adequate level of protection for personal data collected from EU data subjects, the transfer will be subject to appropriate additional safeguards under [either the standard contractual clauses or the Privacy Shield]. You can obtain a copy of the standard contractual clauses by contacting us at privacy@blockchains.com. Your personal data will be retained by Controller as long as Controller determines it is necessary to evaluate your application for employment. Under the GDPR, you have the right to request access to your personal data, to request that your personal data be rectified or erased, and to request that processing of your personal data be restricted. You also have to right to data portability. In addition, you may lodge a complaint with an EU supervisory authority. When applying, mention the word CANDYSHOP to show you read the job post completely.