Crypto.com · Hong Kong

[Security Compliance] Digital Trust & Resilience Specialist

负责全球 IT 审计、合规认证与安全合规自动化。

最近核查時仍有刊登最近確認刊登:2026-11-03 18:36:37.962579+00

招聘狀態可能變動,申請前請查看原始職位。

薪酬未公開
學歷未说明
語言English · proficiency preferred
經驗信息安全、隐私、IT审计或IT风险管理2-5年经验

工作內容

  • 协调并执行年度 IT 内外部审计和 ISO/SOC 2 认证
  • 开展全球安全意识与合规培训并跟踪成效
  • 自动化证据收集与合规流程以提升效率
  • 参与风险评估、整改和控制框架维护

職位要求

  • 信息安全、隐私或 IT 审计经验 2-5 年
  • 有 ISO、SOC、PCI-DSS 等审计/认证经验
  • 有全球员工合规培训经验
  • 英语能力佳,能与海外审计方沟通
查看招聘來源的要求摘錄

原始資料於 2026-11-01 查閱;內容可能已更新,請查看原始職位。

Requirements & Qualifications:
At least 2-5 years of experience in information security, privacy, IT audit, or IT risk management
Demonstrated experience conducting IT internal and/or external audits, including ISO 27001, ISO 27701, ISO 22301, ISO 42001, SOC 1, SOC 2, PCI-DSS, SOX, cloud technologies, and data protection or equivalent certifications and regulations
Experience running compliance training programs and reporting for a global workforce
Hands-on experience with evidence collection automation or compliance workflow AI tooling is a strong advantage
Experience working with external auditors and/or regulators
Preferred:
Proficiency in English with the ability to engage overseas counterparts and auditors
Experience in information security and privacy management in virtual assets, fintech, artificial intelligence (AI), online services, and global platform services
Relevant certifications, such as CISSP, CRISC, CISM, CISA, ISO 27001 LA, CIPT, CIPP/E, or CIPP/US
Knowledge of global regulatory frameworks and demonstrated experience managing regulator relationships across jurisdictions, including GDPR, DORA, CFTC, MiCA, HKMA, and HK SFC.
Experience establishing information security and privacy frameworks to meet local regulatory requirements
Strong communication skills with the ability to translate complex technical issues for non-technical business stakeholders
Interest and understanding of Blockchain and AI technologies
Collaborative team player with a positive attitude, detail-oriented mindset, and commitment to continuous learning
Our Security Team
At Crypto.com, our dedication to user security is led by our highly experienced Security Team. Comprising an international roster of seasoned cybersecurity experts, our team leads the company's Security, Privacy, and Security Compliance endeavors.
The team includes holders of international patents for technologies integrated in our security architecture. Under the stewardship of a distinguished CISO recognized by the Forbes Technology Council and among the Global Top 100 CISOs, our team has consistently championed industry standards, acquiring certifications like ISO27001, ISO27701, ISO22301, ISO42001, PCI:DSS 3.2.1 (Level 1), NIST Tier 4, and SOC 2 Type II, in addition to the MPI License from Singapore MAS. Our Chief Information Security Officer reports directly to the CEO, underscoring the prioritization of security in our organization's hierarchy.
Our Security Team not only places great emphasis on credentials and expertise but also deeply values hands-on experience, rapid cognition, and dynamic learning. The challenges in the world of crypto are ever-evolving, and as such, our team prides itself on quick adaptability and robust teamwork, ensuring that we stay ahead of potential threats and always safeguard our user base.
#LI-CY2

來源:公司官网 · 資料查閱日期 2026-11-01。職位狀態及要求請以原始招聘頁面為準。