Technology and Security Risk Director

原始資料於 2026-11-01 查閱；內容可能已更新，請查看原始職位。

What We Look For In You
8+ years in information security, with a strong security architecture or technical security background; fintech, crypto or cloud-native experience preferred.
Practical experience designing, implementing or reviewing cloud, IAM, cryptographic, network or application security controls.
Experience in risk oversight, or readiness to transition, with the technical judgement to challenge controls and recommend proportionate improvements.
Ability to threat-model systems and assess technical evidence, including architecture diagrams, IAM policies, logging configurations and dependencies.
Working knowledge of cloud resilience, multi-region/AZ failover, RTO/RPO and disaster recovery testing.
Familiarity with NIST CSF, ISO 27001, SOC 2 and relevant privacy requirements, including GDPR and PDPA, and their application to technical controls.
Ability to independently assess and test controls, evaluate incidents and drive remediation with engineering and security teams; GRC platform experience desirable.
Clear written and verbal communication, translating technical findings into prioritised actions for business stakeholders and governance committees.
Strong stakeholder management skills, providing constructive challenge and collaborating across functions and geographies.
A proactive, adaptable approach, with confidence taking ownership and improving practices in a fast-paced environment.
A relevant degree or equivalent practical experience; CISSP, CCSP, cloud security/architecture, CISA or CISM qualifications desirable.
Perks & Benefits
Competitive total compensation package
L&D programs and Education subsidy for employees' growth and development
Various team building programs and company events
Wellness and meal allowances
Comprehensive healthcare schemes for employees and dependants
More that we love to tell you along the process!
Please note that Hong Kong is a group-level service hub, and OKX does not carry on a business of operating a virtual asset trading platform in Hong Kong.
Notice:
All official OKX vacancies are published on this website. While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated. If in doubt, please apply directly through our official careers website.
Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to OKX's Candidate Privacy Notice.