Chief Information Security Officer

Job description / Role

Chief information security officer - product line

Binance is a leading global blockchain ecosystem behind the world's largest cryptocurrency exchange by trading volume and registered users. We are trusted by over 280 million people in 100+ countries for our industry-leading security, user fund transparency, trading engine speed, deep liquidity, and an unmatched portfolio of digital-asset products. Binance offerings range from trading and finance to education, research, payments, institutional services, Web3 features, and more. We leverage the power of digital assets and blockchain to build an inclusive financial ecosystem to advance the freedom of money and improve financial access for people around the world.

The product line chief information security officer, reporting to the global chief security officer, aims to develop and implement a comprehensive information security strategy for one of the leading product lines in the Binance product suite. The role will also ensure that the IT governance and security risk management systems align to international best practices and adhere to regulatory requirements.

Responsibilities

• Experience and expertise in defi security including blockchain, smart contracts, wallet security, and random number generation.
• Hands-on implementation of the IT security risk management function.
• Lead security risk management with all stakeholders as per security risk framework.
• Work as part of the three lines of defense model to ensure funds, data and systems are secure.
• Ensure all security obligations for governance, regulatory and compliance matters are delivered.
• Assist the delivery of the internal and external audits related to technology and security.
• Drive cyber threat and vulnerability management/penetration tests.
• IT security risk management for new projects and/or any integration with third party vendors.
• Manage third party integrations risk to ensure alignment with security standards and SLAs.
• Security incident management, including prompt reporting to senior management and other teams.
• Facilitate continual alignment to regulatory compliance obligations and international standards.

Requirements

• Track record of international company experience and cyber security in a regulatory context.
• A combination of senior management and deep cyber security experience is mandatory.
• Security community contributor either through published material or international conferences.
• Demonstrable experience in a global team with a rich multicultural fast paced environment.
• 10+ years of experience in security and technology compliance in a global firm.
• Bachelor's degree or higher in information technology, cyber security or related field.
• Track record in self motivated leadership and excellent communication and listening skills.
• Proven management of cyber security operations with hands-on implementation skills.
• Delivery of best practices for international data privacy and information security frameworks.
• NIST Cybersecurity and Privacy Framework, ISO 27001/ISO 27701, CIS and PCI-DSS.
• Must seek excellence by default and show a passion for collaboration and team achievement.
• Demonstrable experience delivering effective business and technical security solutions.
• A passion for the latest cyber security trends and emerging threats is essential.

Why Binance

• Shape the future with the world's leading blockchain ecosystem
• Collaborate with world-class talent in a user-centric global organization with a flat structure
• Tackle unique, fast-paced projects with autonomy in an innovative environment
• Thrive in a results-driven workplace with opportunities for career growth and continuous learning
• Competitive salary and company benefits
• Work-from-home arrangement (the arrangement may vary depending on the work nature of the business team)

Binance is committed to being an equal opportunity employer. We believe that having a diverse workforce is fundamental to our success.

By submitting a job application, you confirm that you have read and agree to our candidate privacy notice.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans.