Security and Compliance Lead — Security & Compliance

Mapstone develops infrastructure connecting real-world addresses, neighborhood intelligence, mapping systems, and blockchain-based ownership tools through products such as Address NFTs and marketplace infrastructure. The company operates as a remote-first startup building long-term location intelligence systems for Web3 applications.

The Security and Compliance Lead role focuses on operational security, privacy coordination, compliance readiness, vendor risk management, and incident preparedness across product and company systems. The position works closely with engineering, leadership, legal, and operations teams while supporting application security, wallet integrations, backend systems, and data pipelines. This role is aligned with web3 security roles and is suited for professionals experienced in remote security leadership within startup or SaaS environments.

For organizations scaling a web3 team, this role combines operational security ownership with cross-functional compliance coordination.

🔹 Responsibilities

• Develop practical security and compliance processes for product launches, internal systems, vendor reviews, data handling practices, and incident response readiness.

• Coordinate security reviews covering smart contracts, frontend applications, backend systems, data pipelines, wallet integrations, and third-party providers.

• Maintain policies, access reviews, risk registers, control documentation, and vendor due diligence materials.

• Collaborate with leadership, engineering, legal, and operations teams on privacy operations, data retention practices, user trust, and compliance planning.

• Support preparation for future audits, enterprise partner security reviews, and investor diligence processes related to operational controls and security readiness.

For candidates exploring blockchain infrastructure roles, the position requires balancing risk management with fast-moving startup execution.

🔹 Requirements

• 7+ years of experience in security, compliance, risk management, or trust and safety within technology platforms.

• Experience building security or compliance programs for startups, fintech, SaaS platforms, marketplaces, Web3 companies, or data-focused products.

• Strong understanding of application security, access management, privacy operations, vendor risk, incident response, and control documentation.

• Ability to create clear and practical security policies and procedures.

• Comfortable operating within early-stage startup environments with evolving priorities and limited resources.

• Helpful background includes SOC 2 readiness, ISO 27001, GDPR or CCPA workflows, smart contract security, wallet risk analysis, or blockchain analytics tooling.

• Experience working alongside auditors, legal counsel, enterprise procurement teams, or investor diligence stakeholders is beneficial.

Remote web3 jobs continue expanding across security, compliance, infrastructure, and operational risk functions as blockchain companies prepare for enterprise adoption and audit readiness.