Security & Compliance Engineering Lead

Bybit Limited; Jakarta Pusat; On-site; IDR 500,000,000 - 800,000,000; Full time

Benefits offered by this job

Growth fund

Team events

Global collaboration

Career advancement

Internal mobility

Job summary

Bybit Limited, a leading cryptocurrency exchange, is seeking a Regulatory Compliance and Information Security professional in Jakarta to strengthen local oversight and global security alignment.

You will work with regulatory bodies, support audits, and help maintain the ISMS while coordinating with HQ. Fluency in English and Chinese is expected, and Indonesian language is a plus.

Join a fast-moving, global team and contribute to trusted operations in a rapidly expanding digital finance ecosystem.

Qualifications

• 4–5 years of experience in information security or compliance.
• Experience with regulatory reception or audit support (experience with OJK, Bappebti, or Kominfo preferred).
• Familiarity with information security frameworks (ISO 27001, SOC2, NIST or equivalent standards).
• Experience with gap analysis, threat and risk assessment, and compliance document management.
• Understanding of access control principles, incident response processes, and security awareness training systems.
• Fluent in Chinese and English listening and speaking, strong written expression ability; those who can speak Indonesian are preferred.

Responsibilities

• Cooperate with on-site inspections and remote reviews by regulatory agencies.
• Explain the current status, architecture, and control measures of the company's information security management system to inspectors during regulatory scrutiny.
• Prepare technical documents and evidence materials required for audit (e.g., system architecture diagrams, access control instructions, data flow diagrams).
• Track regulatory inquiry and rectification requirements, coordinate internal teams to complete closed loops on time.
• Provide timely feedback on local regulatory policy dynamics to the headquarters security compliance team.
• Manage server root accounts on demand to ensure root account security.

Skills

Information security

Regulatory compliance

Audit support

Threat and risk assessment

Education

Bachelor's degree in information security or related field

CISA, CISSP or ISO 27001 certifications

Tools

ISO 27001 framework

SOC 2 framework

NIST framework

Job description

Bybit Limited, a leading cryptocurrency exchange, is seeking a Regulatory Compliance and Information Security professional in Jakarta to strengthen local oversight and global security alignment.

You will work with regulatory bodies, support audits, and help maintain the ISMS while coordinating with HQ. Fluency in English and Chinese is expected, and Indonesian language is a plus.

Join a fast-moving, global team and contribute to trusted operations in a rapidly expanding digital finance ecosystem.