Head of Cybersecurity - Crypto Exchange

Tokalent; Hong Kong; On-site; HKD 1,800,000 - 2,400,000; Full time

Job summary

Tokalent seeks a Head of Cybersecurity to lead security strategy for a crypto exchange, aligning risk posture with business goals.

You will oversee governance, incident response, risk management, and regulatory compliance across Hong Kong operations, collaborating with executives and auditors.

Proficiency in ISO27001, NIST, GDPR-like controls, and experience with digital assets security are required, with strong Mandarin/Cantonese and English communication.

Qualifications

• Bachelor's degree in Information Security, Cybersecurity, Data Privacy, IT or related fields.
• 10+ years in IT security or risk management, fintech exposure preferred.
• Familiar with ISO27001, ISO27701, NIST, GDPR; security for digital assets.

Responsibilities

• Establish and maintain corporate security policies tailored to a crypto exchange.
• Manage security incidents; ensure controls and communicate to senior management.

Skills

Security leadership

Communication with senior management

Bilingual English/Chinese

Education

Bachelor's degree in Information Security

Tools

CISSP

CISM

CISA

CEH

Job description

About the job Head of Cybersecurity - Crypto Exchange

Key Responsibilities:

• Establish and maintain corporate security policies tailored to the specific needs of the virtual asset exchange.
• Manage security incidents, ensure controls are in place to mitigate risks and communicate to senior management and relevant stakeholders
• Collaborate and guide the internal IT teams, service provider , and business stakeholders to enhance defense against cyber-attacks and internal threats.
• Oversee regular security reviews and assessments, focus on the protection of virtual assets, client data and security of internal and external facing systems.
• Proactively initiate risk analysis to identify and mitigate specific security risks to virtual assets and trading systems.
• Promote security best practices for the virtual asset exchange, including security awareness training and emergency drills.

Qualifications:

• Bachelors degree in Information Security, Cybersecurity, Data Privacy, Information Technology or related fields.
• At least 10 years of experience in IT security or technical risk management, ideally with a background in virtual assets service provider or fintech.
• Familiarity with security and data privacy standards such as ISO27001, ISO27701, NIST, GDPR, as well as security practices related to digital currency.
• Relevant security certifications such as CISSP, CISM, CISA, CEH, CBSP is a plus.
• Familiarity with Hong Kong regulations and laws related to cybersecurity, data privacy, data protection, AML/KYC would be a plus
• Having worked in banks, brokerage or asset management or enterprise. Preference for a background in digital asset exchanges or related fields or familiar in block chain technology
• Strong communication skills, able to effectively interact with senior management, auditors, regulators and non-technical personnel.
• Proficient in written and spoken English and Chinese (Mandarin and Cantonese).