Descrição da vaga
<div class="content-intro"><p><strong>About Us</strong></p>
<div data-page-id="HladdPLXIoNz4nxkqkCuk4rAs8v" data-lark-html-role="root" data-docx-has-block-data="false">
<div class="ace-line ace-line old-record-id-XCikdRR2xoZIjdxtCKcuOflrs8d">Established in 2018, Bybit is one of the world’s leading cryptocurrency exchanges and digital financial platforms, serving over 80 million users across more than 200 countries and regions. Powered by world-class technology and a user-first mindset, Bybit delivers a seamless ecosystem across trading, payments, wealth management, custody, institutional services, and Web3 — connecting users to the future of digital finance.</div>
<div class="ace-line ace-line old-record-id-IF06dI0MPoBwYfxbZ4zui13HsoC"> </div>
<div class="ace-line ace-line old-record-id-X5EbdOwvMoYuOmxQBbuueUEDsDd">Our core values define how we build. We listen, care and improve to create products and experiences that put users first. Backed by a global team of ambitious builders, problem-solvers, and innovators, we foster a high-performance and fast-moving environment where talent is empowered to drive real impact at the global scale. Supported by 24/7 multilingual customer service and a strong commitment to innovation, we are shaping the future of finance through technology, collaboration, and bold execution.</div>
<div class="ace-line ace-line old-record-id-LtVud2dO7oglqJxxZoOucqjJsPc"> </div>
<div class="ace-line ace-line old-record-id-RMHkdm4bPo66l3xMVO8ui1o8sle">Today, Bybit is recognized as one of the most trusted and transparent platforms in the digital asset industry, continuing to expand its global presence while building the infrastructure for the next generation of financial services.</div>
</div></div><div data-page-id="SzQqdstdloCF8lxDksguno4Astf" data-lark-html-role="root" data-docx-has-block-data="false">
<p><strong>Responsibilities</strong></p>
<ul class="list-bullet1">
<li class="ace-line ace-line old-record-id-doxusAR2UrHTwKumddzfaonMz8g" data-list="bullet">
<div><strong>Regulatory Support & MIC-IT Enablement:</strong> Serve as the primary cybersecurity anchor for Spark. Work intimately with the ROs and MIC-IT to design, implement, and evidence the cybersecurity framework, ensuring senior management possesses full visibility and control over cyber risks as expected by the SFC.</div>
</li>
<li class="ace-line ace-line old-record-id-doxuscnY7HRQuRPm3OSnWwcUWOh" data-list="bullet">
<div><strong>Pre-Launch & Independent Assessments:</strong> Take total ownership of preparing for, facilitating, and successfully passing the SFC-mandated pre-launch independent cybersecurity assessments. Remediate any findings swiftly and effectively prior to go-live.</div>
</li>
<li class="ace-line ace-line old-record-id-doxusKjiZuwwzxW4az3VgciaA9f" data-list="bullet">
<div><strong>Cybersecurity Framework & Operations:</strong> Architect, deploy, and govern Spark’s comprehensive cybersecurity framework. Ensure strict alignment with ISO/IEC 27001, SFC guidelines, and industry best practices for network, application, and endpoint security.</div>
</li>
<li class="ace-line ace-line old-record-id-doxusGBlJ8XyrXs4OVzYuRztplh" data-list="bullet">
<div><strong>Incident Readiness & Response:</strong> Develop, test, and maintain robust Cyber Incident Response Plans (CIRP) and Disaster Recovery/Business Continuity Plans (DR/BCP). Lead tabletop exercises and ensure the organization is perpetually ready to detect, contain, and eradicate threats.</div>
</li>
<li class="ace-line ace-line old-record-id-doxusnngcGokLOaDC6KYSbdrwUh" data-list="bullet">
<div><strong>Ongoing Cyber Controls:</strong> Establish a continuous monitoring environment. Oversee regular penetration testing, vulnerability scanning, threat intelligence gathering, and the implementation of Zero-Trust architecture across Spark’s infrastructure.</div>
</li>
</ul>
<h4 class="heading-4 ace-line old-record-id-doxusCZC0JlwaUKR2jTLFmOEHym"><strong>Leadership & Cross-Functional Collaboration</strong></h4>
<ul class="list-bullet1">
<li class="ace-line ace-line old-record-id-doxuszgNoKfy1urOPDS5mx2hxhh" data-list="bullet">
<div><strong>Strategic Alignment:</strong> Report directly to the CTO while operating with the independence necessary to challenge technical architectures from a security and risk perspective.</div>
</li>
<li class="ace-line ace-line old-record-id-doxusVVibb5Vmmhmf9AKBeWdQ9b" data-list="bullet">
<div><strong>Security</strong><strong> Culture:</strong> Champion a security-first culture across the engineering, product, and operations teams at Spark. Develop and execute ongoing security awareness training for all employees.</div>
</li>
<li class="ace-line ace-line old-record-id-doxusf8TZgw0xYhTOFwG06hlwpd" data-list="bullet">
<div><strong>Vendor Risk Management:</strong> Oversee the security evaluation of third-party vendors, SaaS providers, and blockchain analytics platforms, ensuring external integrations do not compromise Spark’s internal security posture.</div>
</li>
<li class="ace-line ace-line old-record-id-doxushbpEmKvSjypxhLb4PLg5Ag" data-list="bullet">
<div><strong>Local Presence & Communication:</strong> Serve as the on-the-ground security leader in Hong Kong. Communicate complex security risks in clear, business-centric terms to the Board, C-suite, and regulators.</div>
</li>
<li class="ace-line ace-line old-record-id-doxushbpEmKvSjypxhLb4PLg5Ag" data-list="bullet">
<div><strong>Communication:</strong> Exceptional verbal and written communication skills in English (fluency in Mandarin is a strong plus given the Hong Kong location).</div>
</li>
</ul>
<p><strong>Educational & Professional Qualifications</strong></p>
<ul class="list-bullet1">
<li class="ace-line ace-line old-record-id-doxuspSsYO6CtQcANnG8gQ7H5Fd" data-list="bullet">
<div><strong>Academic Background:</strong> Holds a relevant university degree (Bachelor’s required, Master’s preferred) in Cybersecurity, Computer Science, Information Technology, or a related highly technical discipline.</div>
</li>
<li class="ace-line ace-line old-record-id-doxusjYW1zxBZURIEKTe4LNBxQe" data-list="bullet">
<div><strong>Industry Certifications:</strong> Must possesses active, industry-recognized professional cybersecurity certifications such as CISSP, CISM, CISA, or CRISC.</div>
</li>
<li class="ace-line ace-line old-record-id-doxusGRU2GXOj4Wk8JoZ19b5Vzd" data-list="bullet">
<div><strong>Specialized Credentials (Optional but Preferred):</strong> Additional certifications in cloud security (e.g., CCSP), offensive security (e.g., OSCP), or blockchain/smart contract security demonstrate a strong advantage.</div>
</li>
<li class="ace-line ace-line old-record-id-doxusFkzRx0XCcWHpHqnYBzEoHf" data-list="bullet">
<div><strong>Extensive </strong><strong>Security</strong><strong> Tenure:</strong> 10+ years of dedicated experience in cybersecurity, risk management, or IT audit, with at least 3-5 years in a senior leadership or Head of InfoSec capacity within the financial services sector (TradFi, FinTech, or Digital Assets).</div>
</li>
<li class="ace-line ace-line old-record-id-doxusWxKUMGhTl3LmKHKqLkqrmc" data-list="bullet">
<div><strong>SFC </strong><strong>VASP</strong><strong>/VATP Expertise:</strong> Demonstrates sufficient, highly relevant experience directly navigating Hong Kong SFC VASP / VATP (Type 1 & Type 7) license applications from a cybersecurity perspective.</div>
</li>
<li class="ace-line ace-line old-record-id-doxusicBODn51CzPBY2qdljeD0B" data-list="bullet">
<div><strong>Digital Asset </strong><strong>Security</strong><strong>:</strong> Deep, hands-on operational experience with the unique threat vectors of the crypto industry. Proven expertise in securing Hot/Cold/Warm wallet infrastructures, Multi-Party Computation (MPC), Hardware Security Modules (HSMs), and node network security.</div>
</li>
</ul>
</div><div class="content-conclusion"><p><strong>Why Join Us</strong><br>At Bybit, we are committed to fostering a supportive and enriching work environment. <br>Our benefits include:<br>- Study Growth Fund: We support your professional development and continuous learning.<br>- Internal Events: Participate in regular team-building activities, workshops, and events designed to promote collaboration and innovation.<br>- Global Collaboration: Be part of a diverse, international team, working alongside colleagues from around the world.<br>- Career Advancement: Access opportunities for growth and advancement within a rapidly expanding global company.<br>- Internal Mobility: Grow with us- Your long-term development is important to us. We offer internal job opportunities to help build your career path.</p></div>