Bakkt

Role Description Bakkt is seeking a strategic, Chief Information Security Officer (CISO) to lead our global information security posture and serve as our designated officer for regulatory cybersecurity compliance. This role is designed for an innovative leader who thrives at the intersection of modern engineering velocity and institutional-grade risk management. As we scale our Agentic AI and Stablecoin settlement infrastructure, you will lead a progressive security function that moves far beyond "check-the-box" compliance. Reporting directly to executive leadership with a dotted line to the Board of Directors, you will have the authority to build a defensible, automated security program that serves as a core enabler for our business growth. Qualifications - CISSP required, or a demonstrably equivalent executive credential (CISM, CCISO, or CISA). - 12+ years in Information Security, with significant experience operating within a NYDFS-regulated or SEC-reporting public company environment. - Proven success leading security in distributed, cloud-driven (AWS/GCP) environments. Direct experience with stablecoin protocols or AI-driven financial tools is a strong advantage. - Master’s degree (Cybersecurity, MIS, or MBA) and/or senior-level professional designations like GSLC or equivalent executive cybersecurity leadership training. Requirements - Serve as the designated CISO responsible for Bakkt's cybersecurity program in accordance with NYDFS Part 500 requirements. - Oversee comprehensive annual risk assessments and manage our annual certification of compliance process. - Lead our organizational process for determining the materiality of cybersecurity incidents. - Oversee the timely preparation of all required disclosures and filings in accordance with public market regulations and governance standards. - Provide quarterly Material Security Risk briefings to the Audit Committee of the Board. - Maintain and evolve our security controls to support international settlement expansion. - Establish the governance and security framework for autonomous AI agents. - Oversee the security of our end-to-end stablecoin lifecycle. - Architect a comprehensive security model that applies consistent rigor to both human and non-human identities. - Transition our operations from manual GRC to Continuous Controls Monitoring (CCM). - Foster an internal culture where security is built-in from the start. - Implement a threat-modeling process that prioritizes fixes based on real-world business impact. - Own the global Incident Response and Business Continuity plans. - Manage the security lifecycle of critical banking and ICT partners. - Lead, develop, and motivate a high-performing team of security subject matter experts. Benefits - Equal opportunity employer. - Diversity in the workforce. - Must successfully pass a post-offer background check and drug screen. Company Description Bakkt is devoted to having diversity in its workforce and is proud to be an equal opportunity employer. Bakkt does not make any employment decisions based on race, color, religion, sex, national origin, veteran status, disability, age, sexual orientation, gender identity or any other characteristic protected by law.

Role Description We are looking for an absolute doer, not a delegator. Reporting to the Head of Risk, this is an individual contributor role where you will operate essentially as a one-person ERM team. If you are looking to sit in a Second Line ivory tower, review other people’s work, and write high-level policy memos, this is not the role for you. In our lean, fast-scaling environment, you must have the willingness and capability to completely roll up your sleeves and own the entire risk lifecycle from A to Z. You are the Stage 1 triager who drops everything to dive into messy data, investigate real-time incidents, and cut through noise to diagnose what is broken. Simultaneously, you are the Stage 2 builder who executes the actual grunt work required to fix it—writing the risk registers, configuring the tracking tools, co-designing automated controls with engineers, and building your own executive slide decks. We want a gritty, highly technical creator who treats risk as an operational engineering problem and leverages AI and automation to scale themselves, ensuring that a lean infrastructure can punch way above its weight. Qualifications - Bachelor’s degree in Business Administration, Finance, Economics, Law, or a related field. Relevant certifications (e.g., FRM, PRM, CRISC, or CRMA) are a plus. - 7–10 years of progressive, hands-on experience in enterprise risk management, internal audit, or compliance — including direct experience designing risk frameworks, performing risk assessments, and executing Second Line monitoring and challenge activities. - Ability to drive execution through cross-functional influence, operating effectively as an individual contributor in the Second Line — overseeing rather than performing First Line activities. - Solid understanding of the crypto and blockchain ecosystem, digital assets, and their unique risk profiles (e.g., custody models, Layer 1/Layer 2 architectures, DeFi primitives, stablecoin dynamics). - Track record working within a regulated financial, banking, or digital asset environment; familiarity with NYDFS, SEC, MiCA, or comparable regulatory regimes preferred. - Working knowledge of counterparty risk assessment, market and liquidity risk concepts, and operational risk frameworks. - A builder/creator orientation — energized by designing and improving processes rather than administering them. Curious, resourceful, and willing to prototype, automate, and iterate. - Demonstrated interest in (and ideally hands-on use of) AI tools, agentic workflows, and automation to make risk and control work faster, sharper, and more data-driven. - A hard focus on continuous improvement in how risks are tracked, validated, and remediated — challenges status quo, identifies friction, and proposes better approaches. - Proven ability to support strategic change initiatives, navigate resistance, and drive cultural alignment around risk management principles. - Strong stakeholder management and executive presence, with the ability to articulate complex risk scenarios to non-technical audiences, the Head of Risk, the Board, and regulators. Requirements - Design, implement, and continuously improve the Enterprise Risk Management framework, risk taxonomy, risk registers, and risk appetite statements specific to digital assets and regulated financial services. - Provide strategic direction for risk mitigation and operational improvement initiatives, guiding them from conception through completion in partnership with First Line business owners. - Validate the design and implementation of sustainable controls established by the First Line to address identified risks, audit findings, and compliance gaps. - Maintain and evolve risk policies, standards, and procedures aligned with regulatory expectations (including NYDFS) and industry best practices. - Oversee and drive risk mitigation efforts related to counterparty exposure, including the assessment and ongoing monitoring of institutional partners, custodians, market makers, and liquidity providers. - Support business-centric risk initiatives across market risk, liquidity risk, and operational risk — providing Second Line challenge and guidance to First Line owners. - Partner with business and product teams on the risk-clearing process for new product launches, token listings, and partner integrations, providing independent Second Line review. - Conduct enterprise-wide risk assessments across financial, operational, strategic, and technological domains — including crypto-specific risks such as custody, stablecoin peg stability, and on-chain exposure — to evaluate enterprise risk levels. - Monitor emerging risks (regulatory, market, technology, and cyber) and provide early warning and recommended actions to the Head of Risk and executive team. - Oversee and drive risk mitigation tied to audit findings, regulatory exam observations, and self-identified issues, holding First Line owners accountable for execution and sustainability. - Validate the design and implementation of remediation actions, track progress to closure, and report status to leadership and the Risk Committee of the Board. - Lead change management associated with ERM transformations, supporting smooth adoption of new risk policies, frameworks, and systems across the enterprise. - Partner with department heads, Legal, Compliance, Internal Audit, Finance, and Technology/Product teams to coordinate effective risk strategies — driving execution through cross-functional influence rather than direct ownership of First Line controls. - Embrace AI and agentic workflows to increase the speed, accuracy, and scalability of Second Line activities — including risk assessments, control validation, issue tracking, and reporting. - Maintain a hard focus on continuous improvement in how risks are identified, escalated, tracked, validated, and remediated — challenging legacy approaches and removing manual friction wherever possible. - Identify, evaluate, and help operationalize new tools, automations, and data-driven approaches to risk monitoring; partner with Technology, Data, and First Line teams to bring them to life. - Operate as a builder and creator — designing better ways of working, prototyping improvements, and measurably raising the bar over time — rather than administering existing processes for their own sake. - Prepare risk reporting, analysis, and materials in support of the Head of Risk, who serves as the primary interface to executive leadership, the Risk Committee of the Board, and regulators (including NYDFS). - Translate complex risk scenarios into clear, actionable insights for technical and non-technical audiences. Benefits - Equal opportunity employer committed to diversity in the workforce. - Must successfully pass a post-offer background check and drug screen.

Role Description We are seeking a seasoned and strategic Credit Card Underwriting Manager to establish and own the comprehensive credit risk framework for our new credit card program. This critical, high-impact role will be responsible for managing application quality, designing automated and manual decisioning processes, owning the administration and performance of the Loan Origination Platform, and setting the program's overall credit risk strategy. The manager is accountable for protecting the program from credit and fraud losses, ensuring strict regulatory compliance, and proactively managing the credit risk profile and the through the door quality of the portfolio. Qualifications - Proven experience in credit card underwriting and credit risk management, including a deep understanding of credit scoring models and compliance with Adverse Action regulations. - Demonstrated ability to manage and update Credit Risk Policy frameworks and buy boxes. - Strong analytical skills for monitoring automated model performance, portfolio delinquency, and identifying emerging fraud trends. - Experience with KYC and credit quality verification processes for manual application reviews. - Expertise in relevant consumer credit regulations, including Reg B and FCRA. - Excellent problem-solving and communication skills for working with cross-functional teams in a highly matrixed fast-paced environment. - Extensive experience in working with external vendors, including Loan Origination Systems, Credit Bureaus, KYC & Fraud providers. Requirements - Establish and drive the end-to-end credit risk management lifecycle in a de novo environment. - Establish and own the foundational Credit Risk Policy framework. - Define and manage the underwriting rules and logic within the Loan Origination System (LOS). - Conduct Manual Reviews on "Refer" applications, including thorough KYC and Income verification. - Own and manage the Adverse Action process and the delivery of all required credit notices. - Continuously monitor and update the Credit Policy buy box based on emerging market trends and performance data. - Oversee model governance, including performance monitoring, recalibration, and coordinating independent model validation. - Proactively monitor the performance, stability, and validity of the automated credit scoring model. - Identify and mitigate complex emerging fraud trends, such as "Sleeper" fraud (synthetic identities). - Coordinate with Operations team on Collections and report on the Delinquency Pipeline. - Manage the relationship and technical integration with the Loan Origination System (LOS) provider and credit bureau partners. - Ensure the Credit Bureau reporting of the Metro2 file is successfully executed. - Coordinate vendor selection and integration with Compliance, Legal, and Analytics teams. - Serve as the primary credit risk liaison with the Sponsor Bank. - Serve as the backup and escalation resource for the Head of Credit Card. - Provide additional duties not explicitly referenced as required by the Head of Credit Card. Benefits - Bakkt is devoted to having diversity in its workforce and is proud to be an equal opportunity employer. - Must successfully pass a post-offer background check and drug screen. Company Description Before submitting your application, please review Bakkt's California Candidate Privacy Notice and Notice at Collection, which explains how Bakkt collects, uses, retains, and discloses applicant and candidate personal information during the recruiting process.

Role Description We are seeking an experienced Credit Card Operations & Settlement Manager (Back-office) to lead operational excellence, settlement, audit oversight, and strategic vendor management for our U.S. de novo credit card program. This role is critical for ensuring regulatory compliance, maintaining high operational efficiency, ensuring strict Sponsor bank program compliance, and managing critical third-party relationships, including core card processor, card fulfillment vendors, and outsourced support. Qualifications - 5+ years of proven experience in credit card back-office operations, including a deep understanding of credit card settlement, Dispute and Chargeback processes, and all applicable credit card regulations. Knowledge of stablecoin money movement is a plus. - Demonstrated success in managing critical third-party vendors (Processors, Sponsor Banks, BPOs, card fulfillment partners) and ensuring their strict program compliance. - Strong analytical skills for defining and monitoring operational KPIs (Turnaround time, error rates). - Proven track record of managing successful internal and external audits, with a keen ability to resolve MRA’s in a timely manner. - Excellent problem-solving and communication skills for handling complex escalations and leading partner relationships. - Ability to work across multiple departments including Compliance, Legal, Marketing, Treasury, Analytics, etc. in a fast-paced highly matrixed organization. Requirements - Own and drive operational excellence, settlement, and strategic vendor management with key vendors including sponsor banks, processors, and customer support. - Facilitate the design and implementation of the daily settlement function for credit card reconciliation ensuring strict Flow of Funds compliance. - Build and manage the Credit Card back office operations function from the ground up using industry best practices and agentic automations where possible. - Own the administration of internal and external audits for the credit card program, ensuring timely reporting and preparation of exam responses. - Design, implement, and maintain the end-to-end Dispute & Chargeback workflow, ensuring strict compliance with Regulation Z. - Act as the final escalation point for complex, high-risk customer issues that cannot be resolved by the front line. - Oversee daily payment processing to ensure all credits post in accordance with Regulation Z requirements. - Conduct deep-dive research to resolve complex ACH Network issues, ensuring seamless fund movement and system integrity. - Ensure cases are investigated and resolved including billing errors and disputes; draft and deliver formal resolution notices (letters or emails) within the specific timeframes mandated by Reg Z. - Monitor API booking failure logs to identify and fix new account errors, ensuring successful onboarding and strict adherence to the Military Lending Act (MLA). - Perform monthly QA/QC audits on 10% of total booked card volume, documenting successful bookings and reporting systemic errors to the Product team for remediation. - Manage the day-to-day and strategic relationship with the card fulfillment vendor, overseeing card printing, shipping, and inventory management. - Serve as the backup and escalation resource for the Head of Credit Card, and support other operations team members as needed. Benefits - Bakkt is devoted to having diversity in its workforce and is proud to be an equal opportunity employer. - Must successfully pass a post-offer background check and drug screen. Company Description California Candidate Privacy Notice: Before submitting your application, please review Bakkt's California Candidate Privacy Notice and Notice at Collection, which explains how Bakkt collects, uses, retains, and discloses applicant and candidate personal information during the recruiting process.

Role Description Complaint Analyst sought for end-to-end customer complaint management within a growing Neobank. Core function involves: - Investigating complaints - Identifying root cause - Supporting regulatory reporting - Ensuring fair, compliant customer outcomes in collaboration with the Complaint Manager, BPO partners, and cross-functional teams Qualifications - 5+ years in customer support, complaints, or operations analysis (financial services/fintech required) - Location: US Remote (ideally EST) - Strong analytical, investigative, and documentation skills - Ability to interpret policies - Experience with case management and data analysis tools (Excel, dashboards) Requirements - Log, validate, and categorize all incoming complaints (support, social media, executive, and regulatory agencies like CFPB) - Prioritize cases based on risk, impact, and SLA - Conduct detailed investigations for L1 and L2 support cases (reviewing transaction history and support notes) - Coordinate resolution development with internal/BPO teams - Escalate complex or high-risk matters - Identify systemic drivers (product issues, process gaps, CX breakdowns) - Track recurring issues and partner with Operations, Product, and Engineering for improvements - Prepare regulatory reports, internal dashboards, and audit documentation in adherence to Reg E, UDAAP, and CFPB requirements - Ensure all complaint records are complete, accurate, and audit-ready - Analyze complaint data to identify trends by category, product, or channel - Participate in governance cadence, including Weekly Complaint Operations Reviews, to drive continuous improvement Benefits - Bakkt is devoted to having diversity in its workforce and is proud to be an equal opportunity employer - Must successfully pass a post-offer background check and drug screen