Lead Security Management Engineer

Bybit
Jakarta, Kuala Lumpur
Full timeFunction: Administration & Executive AssistanceExperience: 4-5 yearsSkills: ["Cross-functional coordination","Stakeholder communication","Document management","Organizational skills","Rigor and attention to detail"]

Own local information security management compliance for audits and regulatory inquiries, coordinating inspections and preparing evidence for ISO 27001/SOC 2-aligned reviews. Maintain the local compliance system and document library, run gap analyses, and track rectification actions to closure. Support security risk/threat assessments, access control policy reviews, incident response escalation, and third-party supplier risk evaluations, working closely with technical and non-technical teams.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Bybit
Bybit
3 months ago

Lead Security Management Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 1 hour agoStatus: Live

Job Summary

Own local information security management compliance for audits and regulatory inquiries, coordinating inspections and preparing evidence for ISO 27001/SOC 2-aligned reviews. Maintain the local compliance system and document library, run gap analyses, and track rectification actions to closure. Support security risk/threat assessments, access control policy reviews, incident response escalation, and third-party supplier risk evaluations, working closely with technical and non-technical teams.
Location: Jakarta, Kuala Lumpur
Employment Type: Full time
Job Function: Administration & Executive Assistance
Seniority: Mid level

Key Responsibilities

  • •Coordinate regulatory receptions and remote reviews with agencies (e.g., OJK, Bappebti, Kominfo) and explain security management system status, architecture, and controls.
  • •Prepare audit technical documents and evidence materials (e.g., architecture diagrams, access control instructions, data flow diagrams) and manage regulatory inquiries/rectification until closure.
  • •Maintain and align the local compliance system with the headquarters ISMS framework, including compliance gap analysis and ongoing document library upkeep for audit readiness.
  • •Perform information security threat and risk assessments, maintain risk registers, and monitor implementation of access control policies and permission assignments.
  • •Support security evaluation and audits by coordinating penetration testing/vulnerability scanning execution and working with internal/external audits (e.g., ISO 27001, SOC 2).

Pay and Benefits

Perks:Learning Budget

Key Requirements

  • •4-5 years of experience in information security, compliance, or a related field.
  • •Experience supporting regulatory reception or audits (OJK, Bappebti, or Kominfo preferred).
  • •Familiarity with information security frameworks such as ISO 27001, SOC 2, and NIST (or equivalent standards).
  • •Experience with gap analysis, threat and risk assessment, and compliance document management.
  • •Understand access control, incident response processes, and security awareness training; fluent in Chinese and English (Indonesian preferred).
Experience:4-5 yearsInformation securityComplianceAuditing
Skills:Cross-functional coordinationStakeholder communicationDocument managementOrganizational skillsRigor and attention to detail
Certifications:CISACISSPISO 27001 Chief AuditorISO 27001 Chief Implementer
Languages:ChineseEnglishIndonesian
Tech Stack:ISO 27001SOC 2NISTPenetration testingVulnerability scanningISMSAccess controlRisk registersIncident response

Company Brief

Bybit
Operates a cryptocurrency exchange and trading platform offering spot, derivatives, copy trading, and related digital asset services for retail and institutional users. The platform focuses on high-liquidity crypto markets, trading tools, and Web3-related products.
Industry: Trading Platforms
Company Size: Enterprise (1,001+ employees)
Growth: Established Company
Founded: 2018
WebsiteLinkedIn