GRC Security Specialist — Crypto Compliance & Risk

BIT Official; Hong Kong; On-site; HKD 900,000 - 1,200,000; Full time

Job summary

BIT is a global digital assets and compliance-driven financial services group seeking a Compliance Program professional to support the implementation and ongoing maintenance of ISO 27001, ISO 27701, SOC 1/2, and MAS guidelines. The role focuses on risk management, audits, and documentation across licensed platforms.

You will collaborate with technical and business teams to gather evidence, manage regulatory responses, and drive improvements to governance processes in a fast-paced crypto

Qualifications

• Bachelor's degree in Computer Science, Information Systems, or a related technical discipline.
• A minimum of 3 years of experience in Security Risk Management, Governance & Compliance, IT audit, or a similar role.
• Experience working in a licensed or regulated financial services environment, such as supporting regulatory examinations, audits, or licensing requirements (e.g., MAS).
• Hands-on experience supporting compliance work against frameworks and standards such as MAS TRM Guidelines, NIST Cybersecurity Framework, ISO 27001/27701, SOC 2, and GDPR.
• Professional certifications such as ISO 27001 Lead Implementer/Auditor, CISA, or CISSP are a plus.
• Strong analytical skills and attention to detail, with the ability to manage multiple tasks and deadlines.
• Good written and verbal communication skills, with the ability to explain compliance requirements to both technical and non-technical colleagues.

Responsibilities

• Compliance Program Support: Support the implementation and day-to-day maintenance of our compliance framework, including certification activities such as ISO 27001, ISO 27701, and SOC 1/2. Prepare and maintain policies, procedures, and control documentation.
• Risk Management & Assurance: Support the third-party risk management program by conducting vendor security assessments and tracking follow-ups. Assist with responses to regulatory and client due diligence requests, security questionnaires, and audits.
• Control Assessment & Evidence Management: Assist with internal and external control assessments and control testing. Collect and organize audit evidence, document findings, and track remediation actions with control owners through to closure.
• Process Improvement: Help identify gaps in processes and controls, keep track of changes in relevant regulatory and compliance requirements, and suggest practical improvements to the team.
• Stakeholder Support: Work with technical and business teams to explain compliance requirements, gather the information needed for assessments, and support security reviews for new products and business initiatives.

Skills

Security Risk Management

Governance & Compliance

IT Audit

Education

Bachelor's degree in Computer Science, Information Systems, or related technical discipline

Job description

BIT is a global digital assets and compliance-driven financial services group seeking a Compliance Program professional to support the implementation and ongoing maintenance of ISO 27001, ISO 27701, SOC 1/2, and MAS guidelines. The role focuses on risk management, audits, and documentation across licensed platforms.

You will collaborate with technical and business teams to gather evidence, manage regulatory responses, and drive improvements to governance processes in a fast-paced crypto