10 дней назад
Technology and Security Risk Director (Crypto)
Вакансия из Hirify Global, списка международных tech-компанийДля мэтча и отклика нужен Plus
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Technology and Security Risk Director (Crypto): Developing and scaling second-line technology and security risk oversight for a crypto exchange with an accent on technology resilience, cybersecurity controls, RCSA, KRIs, and GRC systems. Focus on challenging first-line controls, threat-modeling systems, assessing incidents and technical evidence, and driving remediation across engineering, security, risk, and compliance teams.
Location: Hong Kong, Hong Kong SAR
Company
OKX operates a crypto exchange and develops OKX Wallet and other blockchain products that provide access to crypto trading and decentralized applications.
What you will do
- Refine and scale the second-line Technology and Security Risk oversight program.
- Identify, assess, escalate, and mitigate technology and security risks with Engineering, Product, Risk, Compliance, and Internal Audit stakeholders.
- Oversee technology and security incidents, issues, defects, and remediation processes in partnership with first-line teams.
- Lead the second-line Technology Risk and Control Self-Assessment process and provide challenge of first-line security risks and controls.
- Define, monitor, and report Security Key Risk Indicators.
- Support GRC system enhancements and the implementation of risk management frameworks for technology stakeholders.
Requirements
- 8+ years of experience in information security, with a strong security architecture or technical security background.
- Experience designing, implementing, or reviewing cloud, IAM, cryptographic, network, or application security controls.
- Experience in risk oversight or the technical judgment to challenge controls and recommend proportionate improvements.
- Ability to threat-model systems and assess architecture diagrams, IAM policies, logging configurations, dependencies, incidents, and technical evidence.
- Knowledge of cloud resilience, multi-region or availability-zone failover, RTO/RPO, disaster recovery testing, NIST CSF, ISO 27001, SOC 2, GDPR, and PDPA.
- Relevant degree or equivalent practical experience, with clear communication and stakeholder management skills.
Nice to have
- Fintech, crypto, or cloud-native experience.
- Experience with GRC platforms.
- CISSP, CCSP, CISA, CISM, or cloud security and architecture qualifications.
Culture & Benefits
- Learning and development programs with an education subsidy.
- Team-building programs and company events.
- Wellness and meal allowances.
- Comprehensive healthcare coverage for employees and dependants.
- Competitive total compensation package.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →