{"id":2351401,"url":"https://alion.io/job/bybit-global-security-compliance-coe","title":"Global Security Compliance COE","company":{"id":47455,"name":"Bybit","domain":"bybit.com","url":"https://alion.io/company/bybit","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":93,"open_postings":21,"ghost_share":0,"stale_share":0.286,"repost_share":0,"time_to_fill_p50_days":53,"computed_at":"2026-10-15T05:46:00Z"}},"role":"Finance","role_family":"Finance","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Kuala Lumpur, Malaysia"],"countries":["MY"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":14500,"max_usd":28000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":12},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"GDPR","optional":false},{"name":"ISO 27001","optional":false},{"name":"PCI DSS","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"IAM","optional":true},{"name":"Nessus","optional":true}],"status":"live","first_seen_at":"2026-10-12T09:45:22Z","employer_posted_date":"2026-10-12","last_verified_at":"2026-10-15T07:27:07Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"About Us\nEstablished in 2018, Bybit is one of the world’s leading cryptocurrency exchanges and digital financial platforms, serving over 80 million users across more than 200 countries and regions. Powered by world-class technology and a user-first mindset, Bybit delivers a seamless ecosystem across trading, payments, wealth management, custody, institutional services, and Web3 - connecting users to the future of digital finance.\nOur core values define how we build. We listen, care and improve to create products and experiences that put users first. Backed by a global team of ambitious builders, problem-solvers, and innovators, we foster a high-performance and fast-moving environment where talent is empowered to drive real impact at the global scale. Supported by 24/7 multilingual customer service and a strong commitment to innovation, we are shaping the future of finance through technology, collaboration, and bold execution.\nToday, Bybit is recognized as one of the most trusted and transparent platforms in the digital asset industry, continuing to expand its global presence while building the infrastructure for the next generation of financial services.\nKey Responsibilities\nCompliance Requirements TranslationLiaise with local compliance teams across global regions to develop a deep understanding of the security technical requirements under various regulatory frameworks (e.g., EU DORA, Turkey CMB/Tubitak, Hong Kong SFC). Translate compliance requirements into actionable security platform product requirements and technical solutions.\n\nAudit & Certification SupportLead or participate in security audit preparation for compliance entities, including internal audits, external audits, penetration test report reviews, and audit evidence compilation and delivery - ensuring accuracy and timeliness of all audit materials.\n\nSecurity Operations GovernanceDrive the implementation of security policies, processes, and standards across compliance entities, covering control domains such as vulnerability management, log monitoring (SIEM), antivirus coverage, access rights reviews, and security awareness training.\n\nLicense Application SupportParticipate in the security-related components of financial license applications across regional compliance entities; author technical documentation including security architecture descriptions, control matrices, and risk assessments.\n\nSecurity Metrics ManagementAssist in establishing and maintaining security operations metrics frameworks for each compliance entity (coverage rates, SLAs, compliance rates, etc.); produce regular security operations reports.\n\n──────\nRequirements\nBachelor's degree or above in Computer Science, Information Security, or a related field; 5+ years of experience in information security, with at least 3 years focused on security compliance governance, security auditing, or security operations.\n\nSolid familiarity with mainstream security compliance frameworks and regulatory requirements such as ISO 27001, SOC 2, PCI DSS, and GDPR; knowledge of financial industry security regulations (e.g., DORA, MAS TRM) is a plus.\n\nStrong security technical foundation with the ability to understand the working principles of security products and controls including SIEM, vulnerability scanning tools (Tenable/Orca/Nessus), EDR/antivirus, WAF, and IAM.\n\nHands-on experience participating in security audits (internal or external), with the ability to independently complete audit evidence preparation, control gap analysis, and remediation tracking.\n\nFluent in both Chinese and English; able to read regulatory documents in English, produce security compliance technical documentation, and communicate seamlessly with overseas teams.\n\nStrong cross-functional communication and project execution skills; able to collaborate effectively across multiple time zones and cultural backgrounds.\n\n──────\nBonus Points\nPrior security compliance experience at a cryptocurrency exchange, payment institution, large internet company, or fintech firm.\n\nExperience building multi-region / multi-site security compliance frameworks (not limited to a single region).\n\nFamiliarity with security platform/product development; ability to derive platform feature requirements from compliance needs.\n\nExperience as an ISO 27001 internal auditor or participation in a SOC 2 Type II audit.\n\nHolds certifications such as CISSP, CISM, CISA, or ISO 27001 LA/LI.\n\nDirect hands-on experience with specific regional regulatory frameworks such as DORA, Tubitak, or SFC.\n\nWhy Join Us\nAt Bybit, we are committed to fostering a supportive and enriching work environment. \nOur benefits include:\n- Study Growth Fund: We support your professional development and continuous learning.\n- Internal Events: Participate in regular team-building activities, workshops, and events designed to promote collaboration and innovation.\n- Global Collaboration: Be part of a diverse, international team, working alongside colleagues from around the world.\n- Career Advancement: Access opportunities for growth and advancement within a rapidly expanding global company.\n- Internal Mobility: Grow with us- Your long-term development is important to us. We offer internal job opportunities to help build your career path.","description_format":"text","description_chars":5251,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"Chinese","level":"All levels","optional":false},{"language":"English","level":"All levels","optional":false}]},"benefits":["Continuous learning","Professional development"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Security Compliance","Cryptocurrencies","Crypto Exchanges"],"lifecycle":[{"event":"open","at":"2026-10-12T13:54:58Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":2,"expected_fill_days":53,"reasons":["conf:2","velocity","win:early","comp:brand"],"computed_at":"2026-10-15T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/bybit-global-security-compliance-coe","json_url":"https://alion.io/job/bybit-global-security-compliance-coe.json","meta":{"generated_at":"2026-10-15T08:17:41Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":12625,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":47455},"rest":"https://alion.io/mcp/rest/get_company?id=47455"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbybit-global-security-compliance-coe"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbybit-global-security-compliance-coe"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbybit-global-security-compliance-coe"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/bybit-global-security-compliance-coe\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbybit-global-security-compliance-coe"}]}