IT Security Manager

EX.IO; Hong Kong; Vor Ort; HKD 800.000 - 1.200.000; Vollzeit

Zusammenfassung

EX.IO is seeking a senior information security professional in Hong Kong to lead the protection of our virtual asset trading and custody platforms. You will design and implement cybersecurity frameworks across infrastructure, blockchain security, and incident response, ensuring alignment with regulatory standards and international best practices.

Responsibilities include managing vulnerability assessments, enforcing governance policies, and communicating risks to the C-suite.

Qualifikationen

• Bachelor's degree in IT, Computer Science, or Cyber Security.
• 5–8+ years in information security with blockchain/fintech experience.
• Certifications such as CISSP, CISM, or CISA preferred but not required.
• Expertise in cloud security, cryptography, and security monitoring tools.
• Strong ability to translate technical risks to the C-suite and lead cross-functional teams.

Aufgaben

• Plan and implement cybersecurity frameworks for virtual asset trading platforms.
• Secure blockchain operations including hot/cold wallets and private keys.
• Ensure regulatory compliance with SFC/HKMA and ISO/NIST standards.
• Lead incident response and real-time security breach management.
• Conduct vulnerability assessments and penetration testing on custody systems.
• Develop and enforce internal security governance policies.

Kenntnisse

Cloud security

Blockchain security

Cryptography

Risk communication

Team leadership

Ausbildung

Bachelor's degree in IT / CS / Cyber Security

Tools

AWS Security

Azure Security

SIEM

PAM

IAM

EDR

Jobbeschreibung

• Infrastructure Protection: Plan, design, and build, run cybersecurity frameworks specifically for virtual asset trading and management platforms.
• Blockchain Security: Implement protocols for hot/cold wallet management, private key protection, and smart contract security audits.
• Regulatory Compliance: Ensure the firm meets local standards (e.g., SFC guidelines or HKMA circulars) and international frameworks like ISO/IEC 27001 and NIST CSF.
• Incident Response: Lead the defense against cyber threats and manage real-time responses to security breaches or unauthorized asset transfers.
• Vulnerability Management: Conduct regular penetration testing and vulnerability assessments on the digital asset custody system.
• Governance: Formulate and enforce internal security policies tailored to the high-risk nature of virtual asset exchanges.

Requirements:

• Education: Bachelor's degree in IT, Computer Science, or Cyber Security.
• Experience: Typically 5-8+ years in information security, with specialized experience in blockchain/virtual asset security or fintech.
• Certifications: Industry - standard credentials such as CISSP, CISM, or CISA are highly preferred, but not a must.
• Technical Depth: Expertise in cloud infrastructure security (AWS/Azure), cryptography, and security monitoring tools like SIEM, PAM, IAM or EDR.
• Soft Skills: Ability to translate complex technical risks to C-suite stakeholders and lead cross-functional teams.