Head of Security

Job Overview:

Head of Security will be responsible for building up the security team and establish a strong security framework specifically for the virtual asset exchange. Define and implement security policies, security measures, monitoring/alerts, workflows, and collaborate across teams to protect virtual assets, sensitive data, ensure compliance, counter potential security threats and educate internal staff and external clients to promote security awareness.

Job Description:

• Establish and maintain corporate security policies tailored to the specific needs of the virtual asset exchange.
• Manage security incidents, ensure controls are in place to mitigate risks and communicate to senior management and relevant stakeholders
• Collaborate and guide the internal IT teams, service providers, and business stakeholders to enhance defense against cyber-attacks and internal threats.
• Oversee regular security reviews and assessments, focus on the protection of virtual assets, client data and security of internal and external facing systems.
• Proactively initiate risk analysis to identify and mitigate specific security risks to virtual assets and trading systems.
• Promote security best practices for the virtual asset exchange, including security awareness training and emergency drills.

Requirements:

• Bachelor’s degree in Information Security, Cybersecurity, Data Privacy, Information Technology or related fields.
• At least 10 years of experience in IT security or technical risk management, ideally with a background in virtual assets service provider or fintech.
• Familiarity with security and data privacy standards such as ISO27001, ISO27701, NIST, GDPR, as well as security practices related to digital currency.
• Relevant security certifications such as CISSP, CISM, CISA, CEH, CBSP) is a plus.
• Familiarity with Hong Kong regulations and laws related to cybersecurity, data privacy, data protection, AML/KYC would be a plus
• Familiarity in block chain technology and cryptocurrencies is a plus
• Strong communication skills, able to effectively interact with senior management, auditors, regulators and non-technical personnel.
• Proficient in written and spoken English and Chinese (Mandarin and Cantonese).