Head of Security

RedotPay group; Hong Kong; On-site; HKD 1,200,000 - 1,600,000; Full time

Job summary

RedotPay group seeks a seasoned Head of Security to lead global security strategy, risk governance, and security programs across payments and Web3 platforms. You will steer architecture, incident response, and cross-functional collaboration with Engineering, Risk and Compliance to enable secure global growth.

Responsibilities include securing on-chain and off-chain payments, protecting wallets, designing access controls, and building a high-performance security team capable of handling

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or related field preferred.
• 8+ years of experience in information security, cybersecurity, or related field with team leadership.
• Proven ability to build and manage security programs from scratch.
• Strong understanding of blockchain, digital assets, and on-chain security risk controls.

Responsibilities

• Lead the security program, architecture, and governance to support global payments growth.
• Oversee security risks across stablecoins, on-chain transfers, fiat ramps, and card payments.
• Design and protect core systems, cloud infra, networks, and APIs; drive secure development and data protection.
• Develop security for wallets and digital assets (private keys, MPC/multisig, transaction authorisation).
• Establish monitoring, incident response, and post-incident reviews; strengthen business continuity.
• Build and manage the security team; collaborate with Engineering, Product, Risk, Compliance, and Operations.

Skills

Security leadership

Security architecture

Cloud security

Vulnerability management

Incident response

Cross-functional leadership

Blockchain security

Payments security

English communication

Education

Bachelor’s degree in Computer Science or related field

Job description

RedotPay is a global crypto payment fintech integrating blockchain solutions into traditional banking and finance infrastructure. Our user-friendly crypto platform empowers millions globally to spend and send crypto assets, ensuring faster, more accessible, and inclusive financial services. RedotPay advances financial inclusion for the unbanked and supports crypto enthusiasts, driving the global adoption of secure and flexible crypto-powered financial solutions. Join us in shaping the future of finance and making a meaningful impact on a global scale.

Responsibilities

• Build the security program: Lead the company’s overall security strategy, technical architecture, and security management program. Establish security standards, risk governance mechanisms, and security processes to support the growth of global payments business.
• Payment and funds security: Oversee security risks across stablecoin payments, on-chain transfers, fiat on- and off-ramps, and card payments. Strengthen transaction security, account protection, anti-fraud controls, anomalous transaction monitoring, and safeguards against financial loss.
• Technical security: Design and protect the security of core business systems, cloud infrastructure, networks, applications, and APIs. Drive secure development, vulnerability management, access controls, data protection, and third-party security risk management.
• Digital asset security: Evaluate and develop security solutions for wallets and digital assets, covering private-key management, MPC/multisig, transaction authorization, key lifecycle management, and on-chain security risks.
• Security operations and incident response: Establish security monitoring, risk alerting, incident response, and post-incident review processes. Lead the response to major security incidents and strengthen business continuity and disaster recovery capabilities.
• Team and cross-functional leadership: Plan, build, and manage the security team. Work closely with Engineering, Product, Risk, Compliance, and Operations to implement security capabilities and support global expansion and related compliance requirements.

Qualifications

• Bachelor’s degree or above in Computer Science, Information Security, or a related field is preferred. 8 years of experience in information security, cybersecurity, application security, or a related field, including experience managing teams and building security programs.
• Experience in payments, fintech, digital assets, trading platforms, or Web3. Proven experience building a security program from the ground up or managing security risks in complex businesses.
• Strong technical security background, with knowledge of application security, cloud security, infrastructure security, identity and access management, vulnerability management, and security incident response.
• Understanding of blockchain and digital asset security, with familiarity with wallet architecture, private-key management, MPC/multisig, and on-chain transactions. Experience in payment flows, transaction risk controls, or funds security is a plus.
• Strong capabilities in security architecture, risk assessment, and incident response decision-making, with the ability to balance technical security and business risk, drive cross-functional collaboration, and deliver security initiatives.
• Experience in cross-border payments, stablecoin payments, crypto-asset custody, international business, or team management is preferred. Strong English communication skills are a plus.