Global Chief Information Security Officer (CISO)

As Global Chief Information Security Officer (CISO) at CEX.IO, you will design, implement, and scale the company's global information security strategy. You are responsible for building security processes from scratch, ensuring unimpeachable information security compliance across regulated markets, and leading a distributed remote team. This is a leadership role focused entirely on the company's global information security posture.

What you'll do

• Define, drive, and execute the global information security roadmap aligned with business goals
• Assess and define CEX.IO's current and future information security requirements
• Identify capability gaps in the context of regulatory considerations and industry benchmarks
• Build, implement, and optimise robust security processes, frameworks, and policies across the entire organisation from the ground up
• Ensure all target teams are provided with the training and resources needed to perform their jobs to the highest degree possible
• Oversee the successful acquisition and maintenance of industry-specific licenses and certifications such as SOC 2, PCI-DSS, DORA, and MiCA/crypto regulations. Manage regular internal and external security audits and executive reporting
• Act as the primary technical point of contact and subject matter expert with external auditors, regulators, and during corporate certification processes and regulatory reviews
• Collaborate with Legal and Data Protection teams to ensure information security policies strictly map to European GDPR compliance, data privacy laws, and corporate governance standards
• Work with Managing Directors and Officers in the UK, US, and ES locations to bridge global information security frameworks with local regulatory mandates and licensing requirements
• Embed security directly into the software development lifecycle and product roadmap. Collaborate with Engineering and Product teams on secure coding practices, vulnerability management, and ensuring that product architectures, especially crypto and wallet features, are secure by design before release
• Lead, mentor, and scale a high-performing, fully remote security team
• Foster a culture of accountability and proactiveness across the security function
• Lead all managerial functions in accordance with the company's policies and procedures: hiring, training, setting goals, appraising performance, and budgeting
• Act as the ultimate point of escalation for global security incidents, ensuring proactive threat hunting and rapid mitigation
• Manage the oversight of technical risk assessments, including vulnerability scanning, penetration testing, risk reviews for new applications, and third-party risk assessments

What you bring

• Proven track record in a senior security leadership role such as CISO, Director of Security, or Head of Information Security within the Financial Services or FinTech sector
• Direct experience steering organisations through complex information security audits, certifications, licensing, and international regulatory compliance
• Demonstrated experience in creating, implementing, and managing group-level security processes and frameworks
• Exceptional leadership skills with a proven ability to manage remote, distributed teams
• Strong sense of ownership, proactiveness, and high responsibility
• Fluent English with excellent communication and reporting skills
• Physical location and legal authorisation to work remotely within Europe

Nice to have

• Ukrainian or Russian language skills
• Hands-on experience in the Cryptocurrency, Web3, or Blockchain industry with understanding of specific security vectors such as custody, cold wallet, and hot wallet security

About CEX.IO

CEX.IO is a cryptocurrency exchange and FinTech platform operating across regulated markets including the UK, US, and ES, with operations subject to compliance frameworks such as MiCA and DORA.