Role Purpose
Own privatekey security, signing controls, and endtoend key lifecycle governance for the Digital Asset Custody platform. The role ensures institutionalgrade cryptographic controls aligned with regulatory, audit, and security requirements.
Key Responsibilities
- Define and maintain key generation, storage, rotation, backup, and recovery procedures
- Configure and manage MPC and/or HSM quorum rules, approval workflows, and segregation of duties
- Implement and enforce signing controls across custody transaction flows
- Support security audits, penetration tests, and regulatory reviews related to key management
- Participate in incident response activities involving key compromise, recovery, or control failures
- Ensure cryptographic controls are embedded by design across custody operations
Core Competencies (Trading / Investments Equivalent)
- Applied cryptography in regulated financial environments
- Custody key lifecycle governance (institutional asset protection equivalent to trade authorization controls)
- Strong securitybydesign mindset with operational and regulatory awareness
Technologies / Platforms (incl. shortlisted)
- HSMs (CloudHSM and/or onpremise HSM solutions)
- MPC frameworks for distributed key custody and signing
- Ripple Custody governance engine
- Supporting security, access control, and audit tooling
Skillset / Experience
- Proven experience in institutional digital asset custody key management
- Deep understanding of blockchain signing models, privatekey cryptography, and transaction authorization
- Handson experience with HSM and/or MPCbased custody architectures
- Strong exposure to audits, regulators, and security governance processes
- Ability to work closely with security, compliance, product, and platform teams in a regulated environment
