Security Compliance and Audit Expert

Get AI-powered advice on this job and more exclusive features. Lead the formulation of security processes and standards covering the entire lifecycle of Web3 business (such as vulnerbility management, change management, smart contract auditing) to ensure compliance with regulatory requirements in Hong Kong (SFC) and other global regions. Design a security management level measurement, including quantitative indicators such as vulnerability repair timeliness, incident response MTTR, and risk handling coverage. Regularly measure these indicators, draft security management level reports, and drive continuous internal improvement in security construction. Regulatory Qualifications and Audit Management Lead the application for international certifications such as ISO 27001 and SOC II. Develop certification implementation plans and drive cross - departmental implementation to ensure a 100% pass rate. Plan and regularly conduct internal information security audits covering infrastructure (such as wallet storage, host security, network secuirity), business systems (such as trading platforms), and internal processes (such as permission audits). Produce audit reports and track the closure of non - compliance items. Lead the due diligence and security qualification audits of partners and third - party vendors. Identify potential risks (such as data encryption flaws, insufficient security development management) and drive rectifications to reduce supply - chain security risks. Qualifications Work Experience Over 5 years of experience in security compliance or auditing, including at least 2 years in the Web3/cryptocurrency industry. Led at least one international security certification (such as ISO 27001) or cryptocurrency - related license application project. Preference for those holding certifications such as CISSP, CISA, CISM. Skill Requirements Familiarity with cryptocurrency regulatory frameworks and requirements in various regions (such as Hong Kong VASP, EU MiCA). Proficiency in audit methodologies (such as COBIT, NIST CSF). Soft Skills Ability to coordinate with technical, business, and legal teams to implement compliance strategies and drive the closure of high - priority issues (such as license applications, audit rectifications). Proactively identify potential compliance risks based on regulatory trends and industry security developments (such as smart contract vulnerabilities, evolving money - laundering methods) and develop response plans. Seniority level Seniority level Associate Employment type Employment type Full-time Job function Job function Finance Referrals increase your chances of interviewing at Futu Holdings Limited by 2x Get notified about new Audit jobs in Hong Kong, Hong Kong SAR . Risk Consulting - Internal Audit - Staff/ Senior Associate - Hong Kong Assistant Risk and Compliance Manager - Bank of East Asia (Trustees) Limited Senior Associate-Assurance-Hong Kong (IG/EG) Senior Manager - Business Continuity Management, Operations Division Senior Finance Associate - Consolidation Senior Associate/Manager/SM - FS - Assurance - Hong Kong Accountant - Global Hedge Fund - Excellent Base and 30%-50% Bonus Central & Western District, Hong Kong SAR 1 day ago Consulting - Financial Services - Finance - Senior Consultant - Hong Kong (Senior) Audit Manager (Treasury, Market Risk, Liquidity Risk, Model Risk) - Banking Audit Internal Audit Manager / Assistant Manager, Internal Audit Eastern District, Hong Kong SAR 3 weeks ago Assistant Vice President, Internal Audit Audit/Finance Accountant (Fintech Company) FSO - Assurance - Audit - Senior/Staff Accountant - Hong Kong VP - Procedures & Process Management, Branch Senior Associate / Associate – Forensic Accounting (Value Creation and Restructuring) We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI. #J-18808-Ljbffr