Security Officer (Web3)

As an IT Security Lead at a leading real-world asset tokenization platform, you oversee and enhance security across cloud infrastructure, internal systems, and digital asset operations, aligned with regulatory standards for Technology Risk Management and Cyber Security. This is a hands-on individual contributor role focused on the design, implementation, and ongoing management of security controls. You work closely with Engineering to ensure secure system design and operations, and partner with the Chief Risk Officer and Chief Information Security Officer on risk, governance, and security oversight.

What you'll do

• Own and maintain security controls across AWS, including IAM, access management, logging, and network security
• Identify and remediate threats, vulnerabilities, misconfigurations, and access risks across systems
• Maintain and actively manage the Technology Risk Management register, including risk identification, tracking, and remediation
• Act as the security gatekeeper, performing security reviews of all new features, smart contract integrations, and system architectures prior to launch
• Act as the primary owner of security vendors such as MSSPs, monitoring tools, and Web3 security providers, ensuring effective coverage and response capability
• Monitor system health, investigate security alerts, and lead incident response, including coordination with internal teams and external providers for containment, recovery, and escalation
• Design and maintain institutional-grade wallet and transaction security controls, ensuring the integrity of minting and redemption processes
• Lead third-party and vendor risk reviews, including technical due diligence for integrations, web3 protocols, and service providers
• Support the testing and continuous improvement of disaster recovery and resilience processes
• Maintain and enhance recovery procedures for critical systems

What you bring

• 5-8 years in IT security, security engineering, or DevSecOps, with at least 2-3 years specifically within crypto or a web3-native environment
• Strong hands-on experience in cloud security, particularly AWS (IAM, logging, networking)
• A strong understanding of blockchain security fundamentals, including Ethereum and EVM, smart contract vulnerabilities, and oracle risks
• Hands-on ability to design and implement security solutions independently
• Experience working with or managing external security vendors
• Experience working in startups or fast-moving environments

Nice to have

• Experience working within a regulated environment such as MAS, BMA, FCA, or SEC
• Familiarity with custody providers such as Fireblocks
• Experience supporting audits such as ISO or SOC2

What we offer

• The opportunity to directly contribute to the success and growth of one of the most reputable and regulated RWA tokenization platforms in the space, with a proven commercial track record
• A supportive culture that values clear communication and high-quality execution
• Competitive compensation
• Eligibility to participate in the Employee Stock Option Scheme and token incentive allocation
• Flexible work arrangements

About the company

This is a leading real-world asset tokenization platform, founded in 2022, that bridges traditional and decentralized finance through regulated entities in two offshore jurisdictions. The company provides secure, transparent, and compliant on-chain access to tokenized RWA, with a core focus on compliance and innovation.