Chief Information Security Officer

Bybit
Hong Kong
Workplace: OnsiteFull timeFunction: CybersecurityExperience: 10+ yearsEducation: bachelorsSkills: ["Leadership","Risk management","Security awareness","Strategic communication","Vendor risk management"]

Lead Spark’s cybersecurity strategy and execution as the primary security anchor, partnering with business and IT stakeholders to implement and evidence an SFC-aligned cybersecurity framework. Own end-to-end preparation for SFC-mandated pre-launch independent assessments and remediate findings. Architect and govern security controls across network, application, and endpoint domains, drive incident readiness and disaster recovery planning, and establish continuous monitoring with penetration testing and Zero-Trust initiatives.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Bybit
Bybit
18 hours ago

Chief Information Security Officer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 15 hours agoStatus: Live

Job Summary

Lead Spark’s cybersecurity strategy and execution as the primary security anchor, partnering with business and IT stakeholders to implement and evidence an SFC-aligned cybersecurity framework. Own end-to-end preparation for SFC-mandated pre-launch independent assessments and remediate findings. Architect and govern security controls across network, application, and endpoint domains, drive incident readiness and disaster recovery planning, and establish continuous monitoring with penetration testing and Zero-Trust initiatives.
Location: Hong Kong
Workplace: Onsite
Employment Type: Full time
Job Function: Cybersecurity
Seniority: CXO level

Key Responsibilities

  • •Serve as the primary cybersecurity anchor for Spark, partnering with ROs and MIC-IT to design, implement, and evidence an SFC-aligned cybersecurity framework with visibility into cyber risks for senior management.
  • •Own preparation for and successful completion of SFC-mandated pre-launch independent cybersecurity assessments, remediating findings prior to go-live.
  • •Architect, deploy, and govern Spark’s cybersecurity framework, ensuring alignment with ISO/IEC 27001, SFC guidelines, and industry best practices across network, application, and endpoint security.
  • •Develop, test, and maintain Cyber Incident Response Plans (CIRP) and Disaster Recovery/Business Continuity Plans (DR/BCP), leading tabletop exercises to ensure readiness against threats.
  • •Establish ongoing cyber controls through continuous monitoring, overseeing penetration testing, vulnerability scanning, threat intelligence gathering, and implementing Zero-Trust across Spark’s infrastructure.

Pay and Benefits

Perks:Learning Budget

Key Requirements

  • •10+ years of dedicated cybersecurity, risk management, or IT audit experience, including 3-5 years in senior leadership or Head of InfoSec capacity within financial services (TradFi, FinTech, or digital assets).
  • •Active, industry-recognized cybersecurity certifications such as CISSP, CISM, CISA, or CRISC.
  • •Bachelor’s degree required (Master’s preferred) in Cybersecurity, Computer Science, Information Technology, or a closely related technical field.
  • •Deep hands-on experience securing crypto threat vectors, including Hot/Cold/Warm wallets, MPC, HSMs, and node network security.
  • •Highly relevant experience navigating Hong Kong SFC VASP/VATP license applications (Type 1 & Type 7) from a cybersecurity perspective.
Experience:10+ yearsFinancial servicesFintechDigital assetsCryptoIT audit
Education:Bachelor's in Cybersecurity, Computer Science, Information Technology, or related technical discipline
Skills:LeadershipRisk managementSecurity awarenessStrategic communicationVendor risk management
Certifications:CISSPCISMCISACRISCCCSPOSCP
Languages:EnglishMandarin
Tech Stack:ISO/IEC 27001SFC guidelinesCyber Incident Response Plans (CIRP)Disaster Recovery/Business Continuity Plans (DR/BCP)Zero-Trust architecturePenetration testingVulnerability scanningThreat intelligenceSecurity awareness trainingTabletop exercisesMPCHSMsHot/Cold/Warm walletsSFC-mandated pre-launch independent cybersecurity assessmentsSFC VASP/VATP (Type 1 & Type 7)

Company Brief

Bybit
Operates a cryptocurrency exchange and trading platform offering spot, derivatives, copy trading, and related digital asset services for retail and institutional users. The platform focuses on high-liquidity crypto markets, trading tools, and Web3-related products.
Industry: Trading Platforms
Company Size: Enterprise (1,001+ employees)
Growth: Established Company
Founded: 2018
WebsiteLinkedIn