GRC Specialist

BIT Official; Hong Kong; On-site; HKD 540,000 - 900,000; Full time

Job summary

BIT is a global digital asset financial services group seeking a Compliance Program Support professional in Hong Kong. You will help implement and maintain our compliance framework, including ISO and SOC certifications, and work with internal teams to ensure regulatory alignment.

The role requires a bachelor’s degree in a technical field, at least 3 years in risk management or IT audit, and strong communication skills to explain complex requirements to colleagues and regulators.

Qualifications

• Bachelor’s degree or higher in a technical field.
• 3+ years in Security Risk Management, Governance & Compliance or IT audit.
• Experience in licensed/regulatory financial services (e.g., MAS).
• Familiar with MAS TRM Guidelines, NIST CSF, ISO 27001/27701, SOC 2, GDPR.
• Certifications such as ISO 27001 Lead Implementer/Auditor, CISA or CISSP are a plus.
• Strong analytical and communication skills.

Responsibilities

• Support ISO 27001, ISO 27701, and SOC 1/2 programs and documentation.
• Assist with third-party risk management, vendor assessments, and due diligence responses.
• Collect and organize audit evidence; track remediation with control owners.
• Identify gaps in processes and controls; suggest improvements.
• Explain compliance requirements to technical and non-technical teams.

Skills

Regulatory compliance

Risk assessment

Governance & IT audit

Analytical thinking

Communication skills

Education

Bachelor’s degree in Computer Science, Information Systems, or a related technical discipline

3 years of experience in Security Risk Management, Governance & Compliance, IT audit, or a similar role

Tools

NIST CSF

ISO 27001/27701

SOC 2

GDPR

Job description

BIT (formerly Matrixport) is a global digital asset financial services and infrastructure group. Headquartered in Singapore and founded in 2019, BIT bridges traditional finance and digital assets through governance-driven financial services and technology.

The firm manages over US$7 billion in assets and facilitates more than US$7 billion in monthly trading volume. BIT offers services including custody, trading, asset and wealth management, liquidity and financing solutions, and tokenised real-world assets (RWA), serving institutional and professional investors globally.

BIT Group entities maintain a licensed and regulated footprint across Singapore, Hong Kong, Switzerland, the United Kingdom, the United States and Bhutan.

For more information, visit www.bit.com

Why Join Us:

At BIT, we tackle complex problems as a team. We encourage openness and promote transparency, respect, and inclusivity. Every team member is valued and has a voice that can be heard. We are always in search of intellectually curious and entrepreneurial individuals who are keen on making an impact in the crypto ecosystem and in building a better product for the next one billion users.

Job Responsibilities:

• Compliance Program Support: Support the implementation and day-to-day maintenance of our compliance framework, including certification activities such as ISO 27001, ISO 27701, and SOC 1/2. Prepare and maintain policies, procedures, and control documentation.
• Risk Management & Assurance: Support the third-party risk management program by conducting vendor security assessments and tracking follow-ups. Assist with responses to regulatory and client due diligence requests, security questionnaires, and audits.
• Control Assessment & Evidence Management: Assist with internal and external control assessments and control testing. Collect and organize audit evidence, document findings, and track remediation actions with control owners through to closure.
• Process Improvement: Help identify gaps in processes and controls, keep track of changes in relevant regulatory and compliance requirements, and suggest practical improvements to the team.
• Stakeholder Support: Work with technical and business teams to explain compliance requirements, gather the information needed for assessments, and support security reviews for new products and business initiatives.

Job Requirements:

• Bachelor’s degree in Computer Science, Information Systems, or a related technical discipline.
• A minimum of 3 years of experience in Security Risk Management, Governance & Compliance, IT audit, or a similar role.
• Experience working in a licensed or regulated financial services environment, such as supporting regulatory examinations, audits, or licensing requirements (e.g., MAS).
• Hands-on experience supporting compliance work against frameworks and standards such as MAS Technology Risk Management (TRM) Guidelines, NIST Cybersecurity Framework, ISO 27001/27701, SOC 2, and GDPR.
• Professional certifications such as ISO 27001 Lead Implementer/Auditor, CISA, or CISSP are a plus.
• Strong analytical skills and attention to detail, with the ability to manage multiple tasks and deadlines.
• Good written and verbal communication skills, with the ability to explain compliance requirements to both technical and non-technical colleagues.

By submitting a job application, you confirm that you have read and agree to our Candidate Privacy Policy. https://www.bit.com/privacy-candidate