CISO

KuCoin TR; Fatih; On-site; TRY 3,000,000 - 5,200,000; Full time

Job summary

KuCoin TR is seeking an experienced Chief Information Security Officer (CISO) to oversee information security and cybersecurity for the local entity. The role ensures alignment with Turkish regulatory requirements (SPK, TÜBİTAK) and with Group security standards.

Responsibilities include establishing policies, monitoring regulatory needs for crypto-asset providers in Türkiye, managing risks and incidents, and coordinating security controls across infrastructure and vendors.

Qualifications

• Bachelor’s degree or above in Information Security, Cybersecurity, Computer Science, Information Technology, or a related field.
• Significant experience in information security or cybersecurity, including senior leadership or security management roles.
• Strong knowledge of governance, risk management, controls, incident response, and vulnerability management.
• Familiarity with Turkish regulatory requirements for crypto-asset service providers (SPK, TÜBİTAK, etc.).
• Experience in financial services, fintech, banking, or regulated industries is highly preferred.
• Strong communication and stakeholder management across local and global teams.
• Professional proficiency in Turkish and English.

Responsibilities

• Establish, maintain, and review local information security policies and controls in line with Turkish regulations and Group standards.
• Monitor regulatory requirements for crypto-asset providers in Türkiye and coordinate implementation with SPK and TÜBİTAK.
• Identify, assess, and report security risks across systems, data, and third-party services.
• Oversee security monitoring, incident handling, escalation, containment, remediation, and reporting.
• Oversee access governance, privileged access management, and periodic access reviews.
• Coordinate security controls for crypto-asset infrastructure and wallet tech where applicable.
• Coordinate vulnerability assessments, penetration testing, and remediation activities.
• Assess security risks from vendors, cloud services, and outsourced technology providers.
• Collaborate with local management, Group security, IT, engineering, and compliance to strengthen security posture.

Skills

Leadership

Governance

Cybersecurity risk management

Incident response

Vulnerability management

Communication

Stakeholder management

Turkish language

English language

Education

Bachelor’s degree in Information Security or related field

Job description

KuCoin TR is looking for an experienced Chief Information Security Officer (CISO) to oversee the local entity’s information security and cybersecurity framework. This role is responsible for ensuring alignment with applicable Turkish regulatory requirements, including those issued by the Capital Markets Board of Türkiye (SPK), TÜBİTAK, and other relevant authorities, as well as the Group’s security standards.

Key Responsibilities

• Establish, maintain, and periodically review local information security policies, procedures, frameworks, and controls in line with Turkish regulatory requirements and Group standards.
• Monitor applicable information security and cybersecurity requirements for crypto-asset service providers in Türkiye, and coordinate implementation of requirements issued by SPK, TÜBİTAK, and other relevant authorities.
• Identify, assess, monitor, and report security risks across systems, infrastructure, applications, customer information, crypto-asset operations, and third-party services.
• Oversee security monitoring and coordinate the detection, investigation, escalation, containment, remediation, and reporting of security incidents and cyber threats.
• Oversee access governance, privileged access management, segregation of duties, and periodic access reviews. Ensure appropriate controls protect the confidentiality, integrity, and availability of sensitive information.
• Coordinate security controls for crypto-asset infrastructure, wallet technology, private-key management, custody-related systems, and blockchain integrations, where applicable.
• Coordinate vulnerability assessments, penetration testing, remediation activities, and periodic reviews of technical security controls.
• Assess and monitor information security risks associated with vendors, outsourced technology providers, cloud services, and other third parties supporting local operations.
• Work closely with local management, Group security teams, IT, engineering, compliance, and other stakeholders to strengthen the entity’s overall security posture.

Qualifications

• Bachelor’s degree or above in Information Security, Cybersecurity, Computer Science, Information Technology, or a related field.
• Significant experience in information security or cybersecurity, including experience in a senior leadership or security management role.
• Strong knowledge of information security governance, cybersecurity risk management, security controls, incident response, and vulnerability management.
• Familiarity with Turkish regulatory requirements applicable to crypto-asset service providers, particularly information security requirements issued by SPK, TÜBİTAK, and other relevant authorities.
• Experience in financial services, fintech, banking, digital assets, or other regulated industries is highly preferred.
• Strong communication and stakeholder management skills, with the ability to coordinate effectively across local and global teams.
• Professional proficiency in Turkish and English.