[Security Compliance] Digital Trust & Resilience Specialist

As a Digital Trust and Resilience Specialist at Crypto.com, you lead technology risk assessment and security compliance activities for our global operations. You coordinate annual IT internal and external audit programs including ISO and SOC 2 certifications, run mandatory employee security awareness training worldwide, and drive automation of evidence collection. You will also help build AI automations and workflows to boost the efficiency of Digital Trust and Resilience operations, identifying compliance gaps and providing technical guidance across all business units.

What you'll do

• Coordinate and perform annual IT internal audits and external audits for ISO and SOC 2 certifications across global markets, ensuring certifications support customer and partner onboarding and regulatory audit readiness
• Run global, regulator-mandated employee security awareness and compliance training campaigns, including tracking, reporting, and continuous improvement
• Automate evidence collection and compliance workflows to drive efficiency gains and scale operations in response to growing regulatory demands
• Participate in internal security and privacy assessments, external audits, compliance certifications, and risk management activities
• Provide complete and accurate responses to internal and third-party enquiries on security compliance
• Perform periodic technical, organizational, and third-party risk and control assessments, and manage remediation activities to completion
• Design and maintain control frameworks required to comply with international standards and local regulations across all operating jurisdictions
• Identify and drive process improvements to streamline global security compliance operations and protect team capacity
• Help build AI automations, workflows, and agents to boost the efficiency of Digital Trust and Resilience operations

What you bring

• 2-5 years of experience in information security, privacy, IT audit, or IT risk management
• Demonstrated experience conducting IT internal and/or external audits, including ISO 27001, ISO 27701, ISO 22301, ISO 42001, SOC 1, SOC 2, PCI-DSS, SOX, cloud technologies, and data protection or equivalent certifications and regulations
• Experience running compliance training programs and reporting for a global workforce
• Experience working with external auditors and/or regulators

Nice to have

• Hands-on experience with evidence collection automation or compliance workflow AI tooling
• Proficiency in English with the ability to engage overseas counterparts and auditors
• Experience in information security and privacy management in virtual assets, fintech, artificial intelligence (AI), online services, and global platform services
• Relevant certifications such as CISSP, CRISC, CISM, CISA, ISO 27001 LA, CIPT, CIPP/E, or CIPP/US
• Knowledge of global regulatory frameworks and demonstrated experience managing regulator relationships across jurisdictions, including GDPR, DORA, CFTC, MiCA, HKMA, and HK SFC
• Experience establishing information security and privacy frameworks to meet local regulatory requirements
• Strong communication skills with the ability to translate complex technical issues for non-technical business stakeholders
• Interest and understanding of Blockchain and AI technologies

About Crypto.com

Crypto.com is a global platform company with a dedicated Security Team led by an international roster of seasoned cybersecurity experts reporting to a CISO recognized by the Forbes Technology Council. The company holds multiple security certifications including ISO 27001, ISO 27701, ISO 22301, ISO 42001, PCI:DSS 3.2.1 (Level 1), NIST Tier 4, and SOC 2 Type II, plus the MPI License from Singapore MAS.