Americas Regional Chief Information Security Officer, OKX

• A security professional with solid GRC and risk grounding, ideally from a regulated industry — TradFi (bank, broker-dealer, payments) or regulated crypto is a strong plus, though direct crypto experience isn't required
• Enough technical depth to hold your own in an architecture or risk conversation with highly technical engineers — you don't need to be the most technical person in the room, but you can't be lost in it either
• A track record of genuine curiosity and self-directed learning over pure years-of-experience — we'd rather hire the sharp problem-solver who's two years light on paper than the person coasting on a long CV
• Confident, clear communication with executives, auditors and regulators alike
• Comfortable with ambiguity
• Happy to work as part of a lean team and within an outsourcing model to central Group affiliates

Desirable

• We're looking for a security leader for the Americas who's equally comfortable in front of a regulator, inside a risk assessment, or reviewing a piece of technical architecture as part of a lean team. You'll start as Deputy CISO, Americas, with a clear and genuine path to taking on the full Regional CISO role as you build track record in the seat. How quickly that happens is up to you
• This isn't a role for someone who wants to operate purely at policy level, nor for a deep specialist engineer who wants to be configuring tools. It's for someone who can move between both worlds: fluent enough in the technical detail to challenge the Engineers or spot a gap in an architecture review, but credible enough in governance to own a regulatory conversation or a board pack
• This is a lean team, so we're not looking for someone to sit back and build a big team under them, this is a direct delivery role. More than anything, we want someone hungry to learn, genuinely curious, and comfortable solving problems they haven't solved before — that matters more to us than ticking every experience box
• Leading on audit defence, risk assessments, and technical architecture reviews across the Americas estate — this is a working role, not an oversight one
• Own the Americas security risk and compliance programme: policy, controls, risk register, regulatory engagement, and reporting
• Manage the US GRC lead directly, and work closely with the US SecOps team lead on operational risk and incident response
• Build relationships with Legal, Compliance, Risk and Internal Audit, and represent security in Americas leadership forums
• Prepare for and take an increasing share of regulator and licensing engagement, building toward owning it outright
• Spot what's missing before it becomes a problem, raise an issue, build an action plan and drive it through to delivery