Blockchain Security & IT Risk Manager

EX.IO; Hong Kong; On-site; HKD 800,000 - 1,200,000; Full time

Job summary

EX.IO is seeking a senior information security professional in Hong Kong to lead the protection of our virtual asset trading and custody platforms. You will design and implement cybersecurity frameworks across infrastructure, blockchain security, and incident response, ensuring alignment with regulatory standards and international best practices.

Responsibilities include managing vulnerability assessments, enforcing governance policies, and communicating risks to the C-suite.

Qualifications

• Bachelor's degree in IT, Computer Science, or Cyber Security.
• 5–8+ years in information security with blockchain/fintech experience.
• Certifications such as CISSP, CISM, or CISA preferred but not required.
• Expertise in cloud security, cryptography, and security monitoring tools.
• Strong ability to translate technical risks to the C-suite and lead cross-functional teams.

Responsibilities

• Plan and implement cybersecurity frameworks for virtual asset trading platforms.
• Secure blockchain operations including hot/cold wallets and private keys.
• Ensure regulatory compliance with SFC/HKMA and ISO/NIST standards.
• Lead incident response and real-time security breach management.
• Conduct vulnerability assessments and penetration testing on custody systems.
• Develop and enforce internal security governance policies.

Skills

Cloud security

Blockchain security

Cryptography

Risk communication

Team leadership

Education

Bachelor's degree in IT / CS / Cyber Security

Tools

AWS Security

Azure Security

SIEM

PAM

IAM

EDR

Job description

EX.IO is seeking a senior information security professional in Hong Kong to lead the protection of our virtual asset trading and custody platforms. You will design and implement cybersecurity frameworks across infrastructure, blockchain security, and incident response, ensuring alignment with regulatory standards and international best practices.

Responsibilities include managing vulnerability assessments, enforcing governance policies, and communicating risks to the C-suite.