CISO

KuCoin TR is seeking an experienced Chief Information Security Officer (CISO) to oversee the local entity's information security and cybersecurity framework. You will ensure alignment with Turkish regulatory requirements from the Capital Markets Board of Türkiye (SPK), TÜBİTAK, and other relevant authorities, while maintaining the Group's security standards.

What you'll do

• Establish, maintain, and periodically review local information security policies, procedures, frameworks, and controls in line with Turkish regulatory requirements and Group standards
• Monitor applicable information security and cybersecurity requirements for crypto-asset service providers in Türkiye, and coordinate implementation of requirements issued by SPK, TÜBİTAK, and other relevant authorities
• Identify, assess, monitor, and report security risks across systems, infrastructure, applications, customer information, crypto-asset operations, and third-party services
• Oversee security monitoring and coordinate the detection, investigation, escalation, containment, remediation, and reporting of security incidents and cyber threats
• Oversee access governance, privileged access management, segregation of duties, and periodic access reviews to ensure appropriate controls protect the confidentiality, integrity, and availability of sensitive information
• Coordinate security controls for crypto-asset infrastructure, wallet technology, private-key management, custody-related systems, and blockchain integrations where applicable
• Coordinate vulnerability assessments, penetration testing, remediation activities, and periodic reviews of technical security controls
• Assess and monitor information security risks associated with vendors, outsourced technology providers, cloud services, and other third parties supporting local operations
• Work closely with local management, Group security teams, IT, engineering, compliance, and other stakeholders to strengthen the entity's overall security posture

What you bring

• A bachelor's degree or above in Information Security, Cybersecurity, Computer Science, Information Technology, or a related field
• Significant experience in information security or cybersecurity, including experience in a senior leadership or security management role
• Strong knowledge of information security governance, cybersecurity risk management, security controls, incident response, and vulnerability management
• Familiarity with Turkish regulatory requirements applicable to crypto-asset service providers, particularly information security requirements issued by SPK, TÜBİTAK, and other relevant authorities
• Professional proficiency in both Turkish and English

Nice to have

• Experience in financial services, fintech, banking, digital assets, or other regulated industries
• Strong communication and stakeholder management skills, with the ability to coordinate effectively across local and global teams

About KuCoin TR

KuCoin TR is the local Turkish entity of KuCoin, providing crypto-asset services subject to Turkish regulatory oversight by SPK and TÜBİTAK.