SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Bybit, a leading global cryptocurrency exchange and digital financial platform serving over 80 million users across 200+ countries, is seeking a Global Security Compliance Center of Excellence professional. This role bridges security operations and regulatory compliance across Bybit's multi-region compliance entities.
Key Responsibilities:
• Compliance Requirements Translation: Liaise with local compliance teams globally to understand security technical requirements under various regulatory frameworks (EU DORA, Turkey CMB/Tubitak, Hong Kong SFC, etc.). Translate compliance requirements into actionable security platform product requirements and technical solutions.
• Audit & Certification Support: Lead or participate in security audit preparation for compliance entities, including internal audits, external audits, penetration test report reviews, and audit evidence compilation and delivery — ensuring accuracy and timeliness of all audit materials.
• Security Operations Governance: Drive implementation of security policies, processes, and standards across compliance entities, covering control domains such as vulnerability management, log monitoring (SIEM), antivirus coverage, access rights reviews, and security awareness training.
• License Application Support: Participate in security-related components of financial license applications across regional compliance entities; author technical documentation including security architecture descriptions, control matrices, and risk assessments.
• Security Metrics Management: Assist in establishing and maintaining security operations metrics frameworks for each compliance entity (coverage rates, SLAs, compliance rates, etc.); produce regular security operations reports.
Requirements:
• Bachelor's degree or above in Computer Science, Information Security, or related field; 5+ years of information security experience, with at least 3 years focused on security compliance governance, security auditing, or security operations.
• Solid familiarity with mainstream security compliance frameworks and regulatory requirements such as ISO 27001, SOC 2, PCI DSS, and GDPR; knowledge of financial industry security regulations (e.g., DORA, MAS TRM) is a plus.
• Strong security technical foundation with ability to understand working principles of security products and controls including SIEM, vulnerability scanning tools (Tenable/Orca/Nessus), EDR/antivirus, WAF, and IAM.
• Hands-on experience participating in security audits (internal or external), with ability to independently complete audit evidence preparation, control gap analysis, and remediation tracking.
• Fluent in both Chinese and English; able to read regulatory documents in English, produce security compliance technical documentation, and communicate seamlessly with overseas teams.
• Strong cross-functional communication and project execution skills; able to collaborate effectively across multiple time zones and cultural backgrounds.
Bonus qualifications: Prior security compliance experience at cryptocurrency exchange, payment institution, large internet company, or fintech firm; experience building multi-region/multi-site security compliance frameworks; familiarity with security platform/product development; experience as ISO 27001 internal auditor or SOC 2 Type II audit participation; certifications such as CISSP, CISM, CISA, or ISO 27001 LA/LI; direct hands-on experience with regional regulatory frameworks such as DORA, Tubitak, or SFC.
