Chief Information Security Officer

Salary Salary range: HKD 60,000 – 90,000 monthly, remuneration adjusted based on candidate’s experience and capability About the Role We are seeking a senior security leader to take end-to-end ownership of our global information security, data protection and cross-regional compliance strategy. This CISO-level position focuses on establishing scalable security governance systems, maintaining full regulatory compliance, and supporting the sustainable and secure expansion of our global business. Key Responsibilities - Formulate and implement the company’s global information security and data protection strategy - Develop and iterate security governance systems, internal policies and enterprise risk management frameworks - Ensure full compliance with international regulatory standards including GDPR, ISO 27001, SOC 2 and other regional data laws - Take charge of cloud security, application security and enterprise identity & access management systems - Lead cross-regional security incident response and full-cycle security risk control - Collaborate closely with senior management, product and engineering teams to drive security-related strategic decisions - Recruit, build and lead a high-performance global security & compliance team Job Requirements - Minimum 10 years of professional working experience in cybersecurity, information security or IT risk management - Proven senior security leadership experience in Web3 / AI security sectors, holding roles such as CISO, Head of Security or equivalent executive security positions - In-depth professional knowledge of global compliance frameworks and cross-border data protection legislation - Solid hands-on experience designing and implementing cloud security and enterprise-level security architecture - Excellent cross-department stakeholder coordination and C-suite communication capabilities - Prior working experience in globalized or rapidly expanding technology companies Preferred Qualifications - Industry experience in fintech, Web3 or digital financial infrastructure - Profound understanding of multi-jurisdiction regulatory compliance requirements - Possession of recognized security professional certifications (CISA, CISM and related credentials)