Tokalent
Head of Cybersecurity - Crypto Exchange
Lead cybersecurity for a crypto exchange: set policies, manage incidents, and protect virtual assets and client data in Hong Kong.
- Compensation
- Not disclosed
- Location
- Hong Kong, Hong Kong SAR, Hong Kong
- Work setup
- Not specified
- Seniority
- C level
- Employment
- Not specified
- Experience
- 10+ years
- Category
- Security
- Posted
Skills
Must have
- Bachelors degree in Information Security, Cybersecurity, Data Privacy, Information Technology or related fields.
- At least 10 years of experience in IT security or technical risk management, ideally with a background in virtual assets service provider or fintech.
- Familiarity with security and data privacy standards such as ISO27001, ISO27701, NIST, GDPR, as well as security practices related to digital currency.
- Relevant security certifications such as CISSP, CISM, CISA, CEH, CBSP is a plus.
- Familiarity with Hong Kong regulations and laws related to cybersecurity, data privacy, data protection, AML/KYC would be a plus
- Having worked in banks, brokerage or asset management or enterprise. Preference for a background in digital asset exchanges or related fields or familiar in block chain technology
- Strong communication skills, able to effectively interact with senior management, auditors, regulators and non-technical personnel.
- Proficient in written and spoken English and Chinese (Mandarin and Cantonese).
Full description
Key Responsibilities:
- Establish and maintain corporate security policies tailored to the specific needs of the virtual asset exchange.
- Manage security incidents, ensure controls are in place to mitigate risks and communicate to senior management and relevant stakeholders
- Collaborate and guide the internal IT teams, service providers, and business stakeholders to enhance defense against cyber-attacks and internal threats.
- Oversee regular security reviews and assessments, focus on the protection of virtual assets, client data and security of internal and external facing systems.
- Proactively initiate risk analysis to identify and mitigate specific security risks to virtual assets and trading systems.
- Promote security best practices for the virtual asset exchange, including security awareness training and emergency drills.
Qualifications:
- Bachelors degree in Information Security, Cybersecurity, Data Privacy, Information Technology or related fields.
- At least 10 years of experience in IT security or technical risk management, ideally with a background in virtual assets service provider or fintech.
- Familiarity with security and data privacy standards such as ISO27001, ISO27701, NIST, GDPR, as well as security practices related to digital currency.
- Relevant security certifications such as CISSP, CISM, CISA, CEH, CBSP is a plus.
- Familiarity with Hong Kong regulations and laws related to cybersecurity, data privacy, data protection, AML/KYC would be a plus
- Having worked in banks, brokerage or asset management or enterprise. Preference for a background in digital asset exchanges or related fields or familiar in block chain technology
- Strong communication skills, able to effectively interact with senior management, auditors, regulators and non-technical personnel.
- Proficient in written and spoken English and Chinese (Mandarin and Cantonese).
Application options
- If you're interested in this role, click 'Apply' now. For further information and a confidential discussion, you can email Winston Tse at winston@tokalent.com