Global Security Compliance COE

Job description

**About Us** Established in 2018, Bybit is one of the world’s leading cryptocurrency exchanges and digital financial platforms, serving over 80 million users across more than 200 countries and regions. Powered by world-class technology and a user-first mindset, Bybit delivers a seamless ecosystem across trading, payments, wealth management, custody, institutional services, and Web3 — connecting users to the future of digital finance. Our core values define how we build. We listen, care and improve to create products and experiences that put users first. Backed by a global team of ambitious builders, problem-solvers, and innovators, we foster a high-performance and fast-moving environment where talent is empowered to drive real impact at the global scale. Supported by 24/7 multilingual customer service and a strong commitment to innovation, we are shaping the future of finance through technology, collaboration, and bold execution. Today, Bybit is recognized as one of the most trusted and transparent platforms in the digital asset industry, continuing to expand its global presence while building the infrastructure for the next generation of financial services. Key Responsibilities 1. Compliance Requirements TranslationLiaise with local compliance teams across global regions to develop a deep understanding of the security technical requirements under various regulatory frameworks (e.g., EU DORA, Turkey CMB/Tubitak, Hong Kong SFC). Translate compliance requirements into actionable security platform product requirements and technical solutions. 2. Audit & Certification SupportLead or participate in security audit preparation for compliance entities, including internal audits, external audits, penetration test report reviews, and audit evidence compilation and delivery — ensuring accuracy and timeliness of all audit materials. 3. Security Operations GovernanceDrive the implementation of security policies, processes, and standards across compliance entities, covering control domains such as vulnerability management, log monitoring (SIEM), antivirus coverage, access rights reviews, and security awareness training. 4. License Application SupportParticipate in the security-related components of financial license applications across regional compliance entities; author technical documentation including security architecture descriptions, control matrices, and risk assessments. 5. Security Metrics ManagementAssist in establishing and maintaining security operations metrics frameworks for each compliance entity (coverage rates, SLAs, compliance rates, etc.); produce regular security operations reports. ────── Requirements 1. Bachelor's degree or above in Computer Science, Information Security, or a related field; 5+ years of experience in information security, with at least 3 years focused on security compliance governance, security auditing, or security operations. 2. Solid familiarity with mainstream security compliance frameworks and regulatory requirements such as ISO 27001, SOC 2, PCI DSS, and GDPR; knowledge of financial industry security regulations (e.g., DORA, MAS TRM) is a plus. 3. Strong security technical foundation with the ability to understand the working principles of security products and controls including SIEM, vulnerability scanning tools (Tenable/Orca/Nessus), EDR/antivirus, WAF, and IAM. 4. Hands-on experience participating in security audits (internal or external), with the ability to independently complete audit evidence preparation, control gap analysis, and remediation tracking. 5. Fluent in both Chinese and English; able to read regulatory documents in English, produce security compliance technical documentation, and communicate seamlessly with overseas teams. 6. Strong cross-functional communication and project execution skills; able to collaborate effectively across multiple time zones and cultural backgrounds. ────── Bonus Points 1. Prior security compliance experience at a cryptocurrency exchange, payment institution, large internet company, or fintech firm. 2. Experience building multi-region / multi-site security compliance frameworks (not limited to a single region). 3. Familiarity with security platform/product development; ability to derive platform feature requirements from compliance needs. 4. Experience as an ISO 27001 internal auditor or participation in a SOC 2 Type II audit. 5. Holds certifications such as CISSP, CISM, CISA, or ISO 27001 LA/LI. 6. Direct hands-on experience with specific regional regulatory frameworks such as DORA, Tubitak, or SFC. **Why Join Us** At Bybit, we are committed to fostering a supportive and enriching work environment. Our benefits include: - Study Growth Fund: We support your professional development and continuous learning. - Internal Events: Participate in regular team-building activities, workshops, and events designed to promote collaboration and innovation. - Global Collaboration: Be part of a diverse, international team, working alongside colleagues from around the world. - Career Advancement: Access opportunities for growth and advancement within a rapidly expanding global company. - Internal Mobility: Grow with us- Your long-term development is important to us. We offer internal job opportunities to help build your career path.