Chief Information Security Officer

As Chief Information Security Officer at Bybit, you serve as the primary cybersecurity anchor for Spark, our new digital asset platform in Hong Kong. You report directly to the CTO and operate with full independence to challenge technical architectures from a security and risk perspective. You take total ownership of designing, implementing, and evidencing Spark's cybersecurity framework to meet SFC regulatory expectations, guiding the platform from pre-launch through independent assessments to go-live and beyond.

What you'll do

• Serve as the primary cybersecurity anchor for Spark, working intimately with Regulatory Officers and MIC-IT to design, implement, and evidence the cybersecurity framework, ensuring senior management has full visibility and control over cyber risks as expected by the SFC
• Take total ownership of preparing for, facilitating, and successfully passing the SFC-mandated pre-launch independent cybersecurity assessments, remediating any findings swiftly and effectively prior to go-live
• Architect, deploy, and govern Spark's comprehensive cybersecurity framework, ensuring strict alignment with ISO/IEC 27001, SFC guidelines, and industry best practices for network, application, and endpoint security
• Develop, test, and maintain robust Cyber Incident Response Plans (CIRP) and Disaster Recovery/Business Continuity Plans (DR/BCP), leading tabletop exercises and ensuring the organization is perpetually ready to detect, contain, and eradicate threats
• Establish a continuous monitoring environment, overseeing regular penetration testing, vulnerability scanning, threat intelligence gathering, and the implementation of Zero-Trust architecture across Spark's infrastructure
• Champion a security-first culture across engineering, product, and operations teams, developing and executing ongoing security awareness training for all employees
• Oversee the security evaluation of third-party vendors, SaaS providers, and blockchain analytics platforms, ensuring external integrations do not compromise Spark's internal security posture
• Serve as the on-the-ground security leader in Hong Kong, communicating complex security risks in clear, business-centric terms to the Board, C-suite, and regulators

What you bring

• A relevant university degree at Bachelor's level minimum (Master's preferred) in Cybersecurity, Computer Science, Information Technology, or a related highly technical discipline
• Active, industry-recognized professional cybersecurity certifications such as CISSP, CISM, CISA, or CRISC
• 10+ years of dedicated experience in cybersecurity, risk management, or IT audit, with at least 3-5 years in a senior leadership or Head of InfoSec capacity within the financial services sector (TradFi, FinTech, or Digital Assets)
• Sufficient, highly relevant experience directly navigating Hong Kong SFC VASP / VATP (Type 1 and Type 7) license applications from a cybersecurity perspective
• Deep, hands-on operational experience with the unique threat vectors of the crypto industry, including proven expertise in securing Hot/Cold/Warm wallet infrastructures, Multi-Party Computation (MPC), Hardware Security Modules (HSMs), and node network security
• Exceptional verbal and written communication skills in English

Nice to have

• Fluency in Mandarin given the Hong Kong location
• Additional certifications in cloud security (e.g., CCSP), offensive security (e.g., OSCP), or blockchain and smart contract security

What we offer

• Study Growth Fund to support your professional development and continuous learning
• Internal Events including regular team-building activities, workshops, and events designed to promote collaboration and innovation
• Global Collaboration as part of a diverse, international team working alongside colleagues from around the world
• Career Advancement with opportunities for growth within a rapidly expanding global company
• Internal Mobility with internal job opportunities to help you build your long-term career path at Bybit

About Bybit

Established in 2018, Bybit is one of the world's leading cryptocurrency exchanges and digital financial platforms, serving over 80 million users across more than 200 countries and regions. The company delivers a seamless ecosystem across trading, payments, wealth management, custody, institutional services, and Web3, recognized as one of the most trusted and transparent platforms in the digital asset industry.