Senior Security Engineer, Technology Governance and Compliance

At OKX, we seek individuals with current Singapore work rights who do not require visa sponsorship. We are a forward-thinking company committed to reshaping the future through technology, established in 2017. Our digital asset exchange, Web3 portal, and blockchain ecosystems are at the forefront of change. With over 50 million users across 180+ countries, we offer diverse financial products and tools. Our purpose is to democratize access to Web3 and decentralized finance, advocating for innovation and societal responsibility through employee engagement in charitable activities. Join our diverse 3,000-member team to help shape the future of the industry.

About the Team:

Our Technology Governance team provides security guidance to OKX entities worldwide, collaborating with legal and compliance to ensure alignment with global or regional requirements. The team supports business growth by aiding various internal units in achieving their objectives.

About the Opportunity:

Security is essential as we grow, boasting excellence in technology and an impressive track record. As a Security Engineer on the Technology Governance & Compliance team, you will play a vital role in enhancing OKX's global security programs. You will lead cross-functional initiatives to elevate the security of all our products and services, working collaboratively with multiple teams.

Key Responsibilities:

• Develop and maintain solutions that support continuous compliance with security standards and regulations.
• Manage third-party security assessments and requests from regulatory agencies and auditors.
• Create procedures for addressing security and compliance queries effectively.
• Implement tools to streamline security processes and enhance efficiency.
• Lead regional security efforts, collaborating with various functional teams.

Requirements:

• Bachelor's degree in Computer Science, Engineering, or related field.
• Over 7 years of experience in executing scalable Security, Risk, or Compliance initiatives.
• Strong communication skills to convey technical security information to diverse audiences.
• Background in leading cross-functional efforts.
• Familiarity with compliance standards such as ISO27001, SOC 1/2, NIST, etc.
• Proficiency in English and Chinese languages for seamless cross-regional collaboration.

Desired Qualifications:

• Certifications like CISSP, CISM, CISA in the security field.
• Previous experience with GRC tools or implementation.
• Knowledge of crypto platforms.

Benefits:

• Competitive compensation package.
• Learning and development programs.
• Team building events and activities.
• Wellness and food allowances.
• Comprehensive healthcare plans for employees and dependents.