Security Leader for Digital Asset Exchange & Governance

Hashgraph; United States; On-site; USD 250,000 - 350,000; Full time

Job summary

Hashgraph is seeking a strategic Head of Security to build and lead the security function for a digital asset trading platform within a dedicated business unit. You will establish governance trusted by regulators and institutional partners, shaping policy, risk, and incident response across custody, wallets, and smart contract security.

The role requires senior security leadership with crypto‑native threat awareness, regulatory engagement, and the ability to partner with engineering, legal, and

Qualifications

• 10+ years in information security, including 5+ years in senior security leadership.
• Direct security leadership experience at crypto exchanges or custody platforms.
• Experience designing and running governance programs with policy, risk, audit and reporting.

Responsibilities

• Set the security strategy and policy framework for the business unit with governance, escalation paths, risk registers and metrics.
• Define and implement required certifications, attestations, and regulatory frameworks; manage third-party and vendor risk; liaise with regulators and auditors.
• Oversee custody, wallet infrastructure, key management and wallet operations (hot/warm/cold).
• Govern security across smart contracts, audits, bug bounty, secure SDLC, and vulnerability management.
• Own security monitoring and incident response, run tabletop exercises and coordinate with legal/compliance/leadership on incidents.
• Lead a small function with budget, tooling strategy, and partner relationships; embed security in engineering and product.

Skills

Strategic governance

Lean function design

Executive communication

Cross-functional collaboration

Security storytelling

Job description

Hashgraph is seeking a strategic Head of Security to build and lead the security function for a digital asset trading platform within a dedicated business unit. You will establish governance trusted by regulators and institutional partners, shaping policy, risk, and incident response across custody, wallets, and smart contract security.

The role requires senior security leadership with crypto‑native threat awareness, regulatory engagement, and the ability to partner with engineering, legal, and