Deputy Chief Information Security Officer (CISO), US

Okx; New York (NY); On-site; USD 250,000 - 376,000; Full time

Benefits offered by this job

Competitive compensation

Education subsidy

Team building programs

Wellness and meals

Healthcare for employees and dependens

Job summary

OKX is seeking a Deputy CISO, Americas, with a path to Regional CISO, to lead audit defence, risk assessments, and regulatory engagement across the Americas. This hands-on role blends governance with technical review in a lean team environment.

You'll own the security risk and compliance programme, manage the US GRC lead, collaborate with Legal and Risk, and drive regulator and licensing engagements while delivering concrete security outcomes for regulators, boards, and stakeholders.

Qualifications

• Solid GRC and risk grounding, ideally from a regulated industry.
• Technical depth to discuss architecture with engineers.
• Curiosity and self-directed learning over years of experience.
• Confident communication with executives, auditors and regulators.
• Comfortable with ambiguity.
• Lean team mindset and outsourcing collaboration.

Responsibilities

• Leading on audit defence, risk assessments, and technical architecture reviews across the Americas estate.
• Own the Americas security risk and compliance programme: policy, controls, risk register, regulatory engagement, and reporting.
• Manage the US GRC lead directly, and work closely with the US SecOps team lead on operational risk and incident response.
• Build relationships with Legal, Compliance, Risk and Internal Audit, and represent security in Americas leadership forums.
• Prepare for regulator and licensing engagement, building toward owning it outright.
• Spot missing controls, raise issues, and drive action plans to delivery.

Skills

GRC knowledge

Regulatory engagement

Technical architecture

Executive communication

Job description

Who We Are

At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles: We Before Me, Do the Right Thing, and Get Things Done. These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er.

About the opportunity

We're looking for a security leader for the Americas who's equally comfortable in front of a regulator, inside a risk assessment, or reviewing a piece of technical architecture as part of a lean team. You'll start as Deputy CISO, Americas, with a path to taking on the full Regional CISO role as you build track record in the seat. How quickly that happens is up to you.

This isn't a role for someone who wants to operate purely at policy level, nor for a deep specialist engineer who wants to be configuring tools. It's for someone who can move between both worlds: fluent enough in the technical detail to challenge the Engineers or spot a gap in an architecture review, but credible enough in governance to own a regulatory conversation or a board pack. This is a lean team, so we're not looking for someone to sit back and build a big team under them, this is a direct delivery role. More than anything, we want someone hungry to learn, genuinely curious, and comfortable solving problems they haven't solved before — that matters more to us than ticking every experience box.

What you'll be doing

• Leading on audit defence, risk assessments, and technical architecture reviews across the Americas estate — this is a working role, not an oversight one.
• Own the Americas security risk and compliance programme: policy, controls, risk register, regulatory engagement, and reporting.
• Manage the US GRC lead directly, and work closely with the US SecOps team lead on operational risk and incident response.
• Build relationships with Legal, Compliance, Risk and Internal Audit, and represent security in Americas leadership forums.
• Prepare for and take an increasing share of regulator and licensing engagement, building toward owning it outright.
• Spot what's missing before it becomes a problem, raise an issue, build an action plan and drive it through to delivery.

What we look for

• A security professional with solid GRC and risk grounding, ideally from a regulated industry — TradFi (bank, broker-dealer, payments) or regulated crypto is a strong plus, though direct crypto experience isn't required.
• Enough technical depth to hold your own in an architecture or risk conversation with highly technical engineers — you don't need to be the most technical person in the room, but you can't be lost in it either.
• A track record of genuine curiosity and self-directed learning over pure years-of-experience — we'd rather hire the sharp problem-solver who's two years light on paper than the person coasting on a long CV.
• Confident, clear communication with executives, auditors and regulators alike.
• Comfortable with ambiguity.
• Happy to work as part of a lean team and within an outsourcing model to central Group affiliates.

Nice to have

• Direct exposure to NYDFS, SEC, FinCEN or similar regulators.
• Prior experience in a role explicitly building toward a CISO or equivalent leadership seat.
• Digital assets or crypto industry familiarity.

Perks & Benefits

• Competitive total compensation package
• L&D programs and Education subsidy for employees' growth and development
• Various team building programs and company events
• Wellness and meal allowances
• Comprehensive healthcare schemes for employees and dependents
• More that we love to tell you along the process!

OKX is committed to equal employment opportunities regardless of race, color, genetic information, creed, religion, sex, sexual orientation, gender identity, lawful alien status, national origin, age, marital status, and non-job related physical or mental disability, or protected veteran status. Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

The salary range for this position is $250,444 to $375,666.

The salary offered depends on a variety of factors, including job-related knowledge, skills, experience, and market location. In addition to the salary, a performance bonus and long-term incentives may be provided as part of the compensation package, as well as a full range of medical, financial, and/or other benefits, dependent on the position offered. Applicants should apply via OKX internal or external careers site.

Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to OKX's Candidate Privacy Notice.