Global Security Compliance COE (Cryptocurrency)

Location: Kuala Lumpur, Malaysia

Company

hirify.global is a global cryptocurrency exchange and digital financial platform providing trading, payments, wealth management, custody, institutional services, and Web3 products across more than 200 countries and regions.

What you will do

• Work with regional compliance teams to translate regulatory security requirements into platform product requirements and technical solutions.
• Lead or support internal and external security audits, penetration test reviews, audit evidence preparation, and delivery of audit materials.
• Govern security policies, processes, and standards across compliance entities, including vulnerability management, SIEM monitoring, antivirus coverage, access reviews, and security awareness training.
• Support security-related sections of financial license applications by preparing architecture descriptions, control matrices, and risk assessments.
• Establish security operations metrics frameworks and produce regular reports covering coverage, service-level, and compliance rates.

Requirements

• Bachelor’s degree or higher in Computer Science, Information Security, or a related field, with 5+ years of information security experience and at least 3 years in security compliance governance, auditing, or operations.
• Strong knowledge of ISO 27001, SOC 2, PCI DSS, GDPR, and related security compliance frameworks.
• Technical understanding of SIEM, vulnerability scanning tools such as Tenable, Orca, and Nessus, EDR/antivirus, WAF, and IAM.
• Hands-on experience with security audits, audit evidence preparation, control gap analysis, and remediation tracking.
• Fluent Chinese and English are required, including the ability to read English regulatory documents and produce technical compliance documentation.
• Strong cross-functional communication and project execution skills across multiple time zones and cultural backgrounds.

Nice to have

• Security compliance experience at a cryptocurrency exchange, payment institution, large internet company, or fintech firm.
• Experience building multi-region or multi-site security compliance frameworks and deriving security platform features from compliance requirements.
• ISO 27001 internal auditor experience or participation in a SOC 2 Type II audit.
• CISSP, CISM, CISA, ISO 27001 LA/LI, or similar certifications.
• Experience with DORA, Tubitak, SFC, or other regional regulatory frameworks.

Culture & Benefits

• Professional development support through a Study Growth Fund.
• Internal team-building activities, workshops, and collaboration events.
• Collaboration with an international team across global regions.
• Career advancement opportunities within a rapidly expanding digital finance company.
• Internal mobility options supporting long-term career development.