Role at a glance
- Salary
- $201.4K – $236.9K/yr
- Location
- Remote - US Remote - US - Zone 1 (Job Requisitions Only)
- Work arrangement
- Remote
- Employment
- Full-time
- Experience
- 12+ years in internal audit or security engineering/operations
Spotted an issue?
We’ll check it against the original posting.
Role Summary
The Senior Manager, Security Audit leads Coinbase’s global Internal Audit coverage of information security, cybersecurity, infrastructure, and application security. The role manages a team, leads complex audits, and provides risk-focused reporting and advisory perspective across security and crypto-native controls.
What You'll Do
- Own the global security audit portfolio across IAM, threat detection, incident response, security architecture, cryptography and key...
- Partner with Security Engineering, Detection & Response, and AppSec teams as an independent cybersecurity audit subject matter expert.
- Manage and develop a team of security auditors while leading high-complexity, high-risk security engagements across multiple jurisdictions.
- Synthesize technical security findings into risk-prioritized reports for executive leadership, the Audit Committee, and the Board.
- Identify emerging threats, including crypto/blockchain attack vectors, AI/ML security risks, and supply chain risks, and adjust audit...
- Use security data analytics and AI tooling, including automated log and evidence analysis, to modernize the security audit function.
Generated from the employer's posting. Verify important details before applying.
View full postingQualifications
Required: leadership of cybersecurity-focused audits or security programs, including direct team management and an individual portfolio; hands-on expertise in 2–3 security domains including IAM, threat detection/SOC, incident response, security architecture, cryptography/key management, cloud security, or application security; CISSP, CISM, CCSP, or CCSK certification; experience with multi-jurisdictional cybersecurity regulatory regimes; executive- and Board-level technical communication; responsible use of generative AI with human oversight.
Required
- 12+ years in internal audit or security engineering/operations
- Leadership of cybersecurity-focused audits or security programs
- Direct team management while carrying an individual portfolio
- Hands-on expertise in at least 2–3 of IAM, threat detection/SOC, incident response, security architecture, cryptography/key management,...
- CISSP, CISM, CCSP, or CCSK certification
- Ability to navigate multi-jurisdictional cybersecurity regulatory regimes
- Ability to communicate technical security concepts to executive and Board-level audiences
- Responsible use of generative AI with human oversight
Preferred
- CISA
Original job description
Content provided by the employer
Original job description
Content provided by the employer
Ready to do the most impactful work of your career? At Coinbase, we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase.
What you'll do:
- Own and lead Coinbase's global security audit portfolio covering IAM, threat detection, incident response, security architecture, cryptography/key management, vulnerability management, application security, and crypto-native security (wallets, cold storage), third-party/outsourced security oversight
- Partner with Security Engineering, Detection & Response, and AppSec teams as the cybersecurity subject matter expert, providing independent audit perspective and advisory value while maintaining third-line objectivity.
- Manage and develop a team of security auditors while personally leading high-complexity, high-risk security engagements across multiple jurisdictions.
- Synthesize complex technical security findings into clear, risk-prioritized reports for executive leadership, the Audit Committee, and the Board.
- Drive proactive identification of emerging threats, including crypto/blockchain attack vectors, AI/ML security risks, and supply chain risks, adjusting audit coverage and methodology accordingly.
- Champion security data analytics and AI tooling (e.g., automated log/evidence analysis) to modernize the security audit function.
- 12+ years in internal audit or security engineering/operations with demonstrated leadership of cybersecurity-focused audits or security programs, including direct team management while carrying an individual portfolio.
- Deep, hands-on expertise in at least 2-3 of: IAM, threat detection/SOC, incident response, security architecture, cryptography/key management, cloud security (AWS/GCP), or application security.
- Relevant security certification required: CISSP, CISM, CCSP, or CCSK (CISA a plus).
- Proven ability to navigate multi-jurisdictional cybersecurity regulatory regimes (NYDFS, SOC frameworks, OCC guidance, multi-state examiner requirements) and translate requirements into audit coverage.
- Demonstrated success communicating deeply technical security concepts to executive and Board-level audiences through written reports and presentations.
- Utilizes generative AI responsibly, maintaining human oversight to deliver business-ready outputs and drive measurable improvements in workflow efficiency, cost, and quality.
Req ID: #P76564
#LI-Remote
Pay Transparency Notice: Base salary varies by location (see range below). Total compensation may also include equity and bonus eligibility, and benefits (medical, dental, vision, 401(k)).
- Application Limit: Candidates may submit a maximum of 3 applications within a 6-month period.
- Equal Opportunity Employer: Coinbase is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or genetic information. Applicants with criminal histories will be considered consistent with applicable federal, state, and local laws.
- US Applicants: View Employee Rights, Know Your Rights, and E-Verify Notice of Participation.
- Accommodations: If you are an individual with a disability who needs a reasonable accommodation, email us your request and contact info at accommodations[at]coinbase.com. Need screen reading technology? Click here to download a free compatible screen reader and view the tutorial.
- Data Privacy & Arbitration: By submitting your application, you agree to our Candidate Privacy Notice. US applicants: By submitting your application, you agree to Arbitration of Disputes.
About the company
Coinbase
Large Enterprise
Coinbase is a leading cryptocurrency exchange platform that enables users to buy, sell, and manage digital currencies such as Bitcoin, Ethereum, and many others. Founded in 2012, the company is headquartered in San Francisco and has grown to serve millions of users globally, providing a secure and user-friendly experience for both novice and experienced traders. Coinbase aims to create an open financial system for the world, advocating for the adoption of digital currencies while ensuring compliance with regulatory standards in various markets. Through its innovative products and services, Coinbase seeks to empower individuals and institutions to transact in cryptocurrencies with confidence.
Coinbase is a leading cryptocurrency exchange platform that enables users to buy, sell, and manage digital currencies such as Bitcoin, Ethereum, and many others. Founded in 2012, the company is headquartered in San Francisco and has grown to serve millions of users globally, providing a secure and user-friendly experience for both novice and experienced traders. Coinbase aims to create an open financial system for the world, advocating for the adoption of digital currencies while ensuring compliance with regulatory standards in various markets. Through its innovative products and services, Coinbase seeks to empower individuals and institutions to transact in cryptocurrencies with confidence.