Information Security Officer

Binance is a global leader in blockchain technology and cryptocurrency services, offering a wide range of financial products, including the largest digital-asset exchange globally.

Our main objective is to advance the adoption of cryptocurrencies and enhance the accessibility of financial resources.

If you are seeking an engaging and purpose-driven environment with limitless opportunities for growth and development, Binance is the ideal destination for you.

Responsibilities:

• Supervise and actively engage in developing, implementing, and optimizing the IT security function and structure for Binance's platform in Luxembourg.
• Manage external vendors, ensuring their adherence to security protocols through hands-on participation.
• Conduct Security Risk Management activities with all stakeholders based on Security Risk Management Frameworks.
• Act as the primary manager responsible for the Security function at Binance in Luxembourg.
• Collaborate within the three lines of defense model to safeguard funds, data, and systems.
• Ensure fulfillment of security obligations related to governance, regulation, and compliance.
• Contribute actively to Security Risk Management as a part of the management team and Board of Directors.
• Participate in and provide guidance for the annual IT audit plan and other relevant internal and external audits linked to Security Risk Management.
• Lead cyber security assessments and penetration tests following the PASSI testing framework.
• Direct IT security risk management for new projects and collaborations with third-party vendors.
• Verify that all third-party connections comply with specified security standards and contractual agreements.
• Lead local security initiatives and support the ongoing enhancement of the global department.
• Take charge of security incident management hands-on, including timely reporting to senior management and other departments.
• Collaborate with the Risk Function to ensure robust Business Continuity Plans.
• Supervise daily Security Risk Management tasks and reporting to the executive leadership teams in Luxembourg.
• Coordinate internal and external audits, penetration tests, and regulatory compliance mandates to ensure continuous compliance and reporting to global and local stakeholders.

Requirements:

• Proven experience in international organizations in cybersecurity in a regulatory context.
• Crucial blend of senior management background and extensive cybersecurity knowledge.
• Actively involved in the security community through publications or participation in global conferences.
• Demonstrated background in global team settings within a diverse and fast-paced environment.
• Over a decade of experience in security and technology compliance within the financial sector.
• Holds a Bachelor's degree or higher in information technology, cybersecurity, or related fields.
• Evident leadership skills, excellent communication, and attentive listening abilities.
• Demonstrated proficiency in managing cybersecurity operations directly and contributing actively to their development.
• Hands-on expertise in executing global projects with international data privacy and information security frameworks, such as NIST Cybersecurity & Privacy Framework, ISO standards, CIS controls, PASSI audits, and PCI-DSS.
• Adherence to a culture of excellence, a team-oriented attitude, and a drive for collaborative success.
• Demonstrated capability in offering effective business and technical security solutions, procedures, tools, and project management within high-performing teams.
• Strong interest in staying updated on cybersecurity trends and emerging threats.
• Essential experience in direct engagement with regulatory authorities and implementing their directives.
• Preferably holds ISO 27001 Lead Auditor certification and/or certifications from ISC2, ISACA, GIAC, or PASSI.
• Proficient in English, French language skills are advantageous.
• Location requirement: Luxembourg.