Security GRC Specialist

BIT Official; Hong Kong; On-site; HKD 900,000 - 1,200,000; Full time

Job summary

BIT is a global digital assets and compliance-driven financial services group seeking a Compliance Program professional to support the implementation and ongoing maintenance of ISO 27001, ISO 27701, SOC 1/2, and MAS guidelines. The role focuses on risk management, audits, and documentation across licensed platforms.

You will collaborate with technical and business teams to gather evidence, manage regulatory responses, and drive improvements to governance processes in a fast-paced crypto

Qualifications

• Bachelor's degree in Computer Science, Information Systems, or a related technical discipline.
• A minimum of 3 years of experience in Security Risk Management, Governance & Compliance, IT audit, or a similar role.
• Experience working in a licensed or regulated financial services environment, such as supporting regulatory examinations, audits, or licensing requirements (e.g., MAS).
• Hands-on experience supporting compliance work against frameworks and standards such as MAS TRM Guidelines, NIST Cybersecurity Framework, ISO 27001/27701, SOC 2, and GDPR.
• Professional certifications such as ISO 27001 Lead Implementer/Auditor, CISA, or CISSP are a plus.
• Strong analytical skills and attention to detail, with the ability to manage multiple tasks and deadlines.
• Good written and verbal communication skills, with the ability to explain compliance requirements to both technical and non-technical colleagues.

Responsibilities

• Compliance Program Support: Support the implementation and day-to-day maintenance of our compliance framework, including certification activities such as ISO 27001, ISO 27701, and SOC 1/2. Prepare and maintain policies, procedures, and control documentation.
• Risk Management & Assurance: Support the third-party risk management program by conducting vendor security assessments and tracking follow-ups. Assist with responses to regulatory and client due diligence requests, security questionnaires, and audits.
• Control Assessment & Evidence Management: Assist with internal and external control assessments and control testing. Collect and organize audit evidence, document findings, and track remediation actions with control owners through to closure.
• Process Improvement: Help identify gaps in processes and controls, keep track of changes in relevant regulatory and compliance requirements, and suggest practical improvements to the team.
• Stakeholder Support: Work with technical and business teams to explain compliance requirements, gather the information needed for assessments, and support security reviews for new products and business initiatives.

Skills

Security Risk Management

Governance & Compliance

IT Audit

Education

Bachelor's degree in Computer Science, Information Systems, or related technical discipline

Job description

BIT (formerly Matrixport) is a global digital asset financial services and infrastructure group. Headquartered in Singapore and founded in 2019, BIT bridges traditional finance and digital assets through governance-driven financial services and technology.

The firm manages over US$7 billion in assets and facilitates more than US$7 billion in monthly trading volume. BIT offers services including custody, trading, asset and wealth management, liquidity and financing solutions, and tokenised real-world assets (RWA), serving institutional and professional investors globally.

BIT Group entities maintain a licensed and regulated footprint across Singapore, Hong Kong, Switzerland, the United Kingdom, the United States and Bhutan.

For more information, visit www.bit.com

Why Join Us

At BIT, we tackle complex problems as a team. We encourage openness and promote transparency, respect, and inclusivity. Every team member is valued and has a voice that can be heard. We are always in search of intellectually curious and entrepreneurial individuals who are keen on making an impact in the crypto ecosystem and in building a better product for the next one billion users.

Key Responsibilities:

• Compliance Program Support: Support the implementation and day-to-day maintenance of our compliance framework, including certification activities such as ISO 27001, ISO 27701, and SOC 1/2. Prepare and maintain policies, procedures, and control documentation.
• Risk Management & Assurance: Support the third-party risk management program by conducting vendor security assessments and tracking follow-ups. Assist with responses to regulatory and client due diligence requests, security questionnaires, and audits.
• Control Assessment & Evidence Management: Assist with internal and external control assessments and control testing. Collect and organize audit evidence, document findings, and track remediation actions with control owners through to closure.
• Process Improvement: Help identify gaps in processes and controls, keep track of changes in relevant regulatory and compliance requirements, and suggest practical improvements to the team.
• Stakeholder Support: Work with technical and business teams to explain compliance requirements, gather the information needed for assessments, and support security reviews for new products and business initiatives.

Qualifications:

• Bachelor's degree in Computer Science, Information Systems, or a related technical discipline.
• A minimum of 3 years of experience in Security Risk Management, Governance & Compliance, IT audit, or a similar role.
• Experience working in a licensed or regulated financial services environment, such as supporting regulatory examinations, audits, or licensing requirements (e.g., MAS).
• Hands-on experience supporting compliance work against frameworks and standards such as MAS Technology Risk Management (TRM) Guidelines, NIST Cybersecurity Framework, ISO 27001/27701, SOC 2, and GDPR.
• Professional certifications such as ISO 27001 Lead Implementer/Auditor, CISA, or CISSP are a plus.
• Strong analytical skills and attention to detail, with the ability to manage multiple tasks and deadlines.
• Good written and verbal communication skills, with the ability to explain compliance requirements to both technical and non-technical colleagues.

By submitting a job application, you confirm that you have read and agree to our Candidate Privacy Policy. https://www.BIT.com/privacy-candidate