Security Compliance and Governance Director, OKX

• Multiple language capabilities, both chinese and english
• 10+ years experience in information security and compliance, with strong technical background
• Deep understanding of security technologies: network security, cloud security, encryption, access controls, security monitoring
• Extensive hands-on experience with security compliance frameworks (ISO 27001, SOC2, PCI-DSS)
• Experience in cryptocurrency/blockchain industry licensing applications
• Strong communication and leadership abilities
• Results-oriented with ability to work under pressure
• Professional certifications such as CISSP, CISM required
• Bachelor's degree in Computer Science, Information Security or related field
• Application security (SAST/DAST/IAST)
• Container and kubernetes security
• Hardware security modules (HSM)
• Secure software development lifecycle (SSDLC)
• Identity and access management (IAM)
• API security and microservices security
• DDoS protection and WAF implementation
• Security automation and orchestration (SOAR)
• Threat hunting and incident response
• Blockchain protocol security

Desirable

• Stay abreast of security technologies, global compliance standards, and regulatory requirements
• Lead the organization's security technology implementation, compliance programs, and licensing initiatives across key jurisdictions
• Direct the security architecture design, compliance certification processes, and license applications
• Security Technology: Lead security architecture design and implementation
• Guide deployment of security controls, monitoring systems, and incident response capabilities
• Review and approve security solutions across cloud and infrastructure
• License Applications: Direct VASP licensing applications across global jurisdictions (Hong Kong, Singapore, Dubai, Europe etc.)
• Manage relationships with regulatory bodies
• Ensure ongoing compliance with licensing requirements
• Coordinate with legal and business teams for application processes
• Team Leadership: Build and lead security and compliance teams
• Work with cross-functional stakeholders to implement security and compliance requirements
• Report to senior management on security, compliance and licensing status
• Security Strategy & Governance:Develop and maintain enterprise security strategy, roadmaps and architectures aligned with business objectives
• Establish security governance frameworks, policies, and standards across the organization
• Lead security steering committee and provide regular security updates to board/executive management
• Manage security budget, resource allocation and strategic vendor relationships
• Define and track security metrics, KPIs and risk indicators