Global Security Compliance Engineer — ISO/SOC2 & AI Automation

P2P; Hong Kong; On-site; HKD 941,000 - 1,412,000; Full time

Job summary

Crypto.com is seeking a Digital Trust and Resilience Engineer to lead technology risk assessment and security compliance across global markets. You will coordinate annual IT internal and external audits for ISO and SOC 2, enabling smooth customer onboarding and regulatory readiness.

You will drive automated evidence collection and security awareness training, and guide remediation across business units. AI automation experience is beneficial, though you won't need to be an AI researcher.

Qualifications

• 2–5 years in information security, privacy, IT audit, or IT risk management.
• Experience conducting IT internal/external audits including ISO 27001/27701/22301, SOC 1/2, PCI-DSS, SOX.
• Experience running compliance training programs for a global workforce.

Responsibilities

• Coordinate and perform annual IT internal audits and external audits for ISO and SOC 2 certifications across global markets.
• Run global, regulator-mandated employee security awareness and compliance training campaigns.
• Automate evidence collection and compliance workflows to drive efficiency gains.
• Participate in internal security and privacy assessments, external audits, and risk management activities.
• Provide complete and accurate responses to security compliance enquiries.
• Perform periodic risk and control assessments and manage remediation.
• Design and maintain control frameworks to meet international standards and local regulations.
• Identify and drive process improvements to streamline global security compliance operations.

Skills

Information security

IT audit

Privacy

Regulatory compliance

Audit coordination

Automation tooling

Cross-functional collaboration

Tools

AI tooling

Automation workflows

Job description

Crypto.com is seeking a Digital Trust and Resilience Engineer to lead technology risk assessment and security compliance across global markets. You will coordinate annual IT internal and external audits for ISO and SOC 2, enabling smooth customer onboarding and regulatory readiness.

You will drive automated evidence collection and security awareness training, and guide remediation across business units. AI automation experience is beneficial, though you won't need to be an AI researcher.