Information Security Officer

<div class="content-intro"><p><strong>About Us</strong></p> <div data-page-id="HladdPLXIoNz4nxkqkCuk4rAs8v" data-lark-html-role="root" data-docx-has-block-data="false"> <div class="ace-line ace-line old-record-id-XCikdRR2xoZIjdxtCKcuOflrs8d">Established in 2018, Bybit is one of the world’s leading cryptocurrency exchanges and digital financial platforms, serving over 80 million users across more than 200 countries and regions. Powered by world-class technology and a user-first mindset, Bybit delivers a seamless ecosystem across trading, payments, wealth management, custody, institutional services, and Web3 — connecting users to the future of digital finance.</div> <div class="ace-line ace-line old-record-id-IF06dI0MPoBwYfxbZ4zui13HsoC">&nbsp;</div> <div class="ace-line ace-line old-record-id-X5EbdOwvMoYuOmxQBbuueUEDsDd">Our core values define how we build. We listen, care and improve to create products and experiences that put users first. Backed by a global team of ambitious builders, problem-solvers, and innovators, we foster a high-performance and fast-moving environment where talent is empowered to drive real impact at the global scale. Supported by 24/7 multilingual customer service and a strong commitment to innovation, we are shaping the future of finance through technology, collaboration, and bold execution.</div> <div class="ace-line ace-line old-record-id-LtVud2dO7oglqJxxZoOucqjJsPc">&nbsp;</div> <div class="ace-line ace-line old-record-id-RMHkdm4bPo66l3xMVO8ui1o8sle">Today, Bybit is recognized as one of the most trusted and transparent platforms in the digital asset industry, continuing to expand its global presence while building the infrastructure for the next generation of financial services.</div> </div></div><div data-page-id="Rl9xdCsyMoC4w2xARoVumOmRsdD" data-lark-html-role="root" data-docx-has-block-data="false"> <h2 class="heading-2 ace-line old-record-id-AvaOdxUlpogugHxaKASuYvGmsOg">Key Responsibilities</h2> <ul class="list-bullet1"> <li class="ace-line ace-line old-record-id-EZyZduBV1oqJcCxqzSCupdZusqz" data-list="bullet"> <div>Own and drive compliance with Turkish regulatory requirements, including SPK (Sermaye Piyasası Kurulu) crypto exchange licensing conditions, TÜBİTAK BİLGEM security criteria and KVKK (Kişisel Verilerin Korunması Kanunu)</div> </li> <li class="ace-line ace-line old-record-id-Po3qde901orDBGxZow6u6r2Wspd" data-list="bullet"> <div>Serve as the primary security point of contact for SPK audits, TÜBİTAK external audits, penetration testing and regulatory inspections; prepare and present audit evidence and responses</div> </li> <li class="ace-line ace-line old-record-id-WfNBd1BddoUDYLx4g2Gu3SIoszd" data-list="bullet"> <div>Maintain the local security policy framework aligned with SPK, TÜBİTAK and global standards (ISO 27001, NIST CSF), including access control, network security, encryption, logging, and incident management</div> </li> <li class="ace-line ace-line old-record-id-D6YPdGu75o051qxZZUguurTYsrh" data-list="bullet"> <div>Lead local incident response as CISO-level incident commander for high-severity events</div> </li> <li class="ace-line ace-line old-record-id-SvGKd590zosG7Lx2iMquNnQNsAe" data-list="bullet"> <div>Oversee the security architecture for local infrastructure, cloud environments (AWS, Huawei Cloud), and customer-facing platforms</div> </li> <li class="ace-line ace-line old-record-id-F8eSdmy8honBuoxhQ1HuCEdWsGh" data-list="bullet"> <div>Oversee security controls for hot and cold wallet infrastructure supporting Turkish customer assets, Ensure key management procedures meet SPK custody requirements</div> </li> <li class="ace-line ace-line old-record-id-EwH4dfKfeobtuqx2U5rulIQFsZf" data-list="bullet"> <div>Build and manage the local security team; define roles, hire talent, develop capabilities</div> </li> <li class="ace-line ace-line old-record-id-UcX2diA8WoXDJbxfiOTumcWTsjh" data-list="bullet"> <div>Maintain the local information security risk register; present risk status and remediation plans to senior management and the Board</div> </li> <li class="ace-line ace-line old-record-id-X4KBdh5ULoiqaHxiaZhuzxScsbf" data-list="bullet"> <div>Act as the security representative in the Turkish entity's management meetings and regulatory discussions</div> </li> </ul> <div class=" old-record-id-Gsr3dMxp5oKZzGxPAEVu1j4Wsjk" data-type="divider"><hr></div> <h2 class="heading-2 ace-line old-record-id-D4BZdEoDSoqOeOx8ksQucokjscX">Requirements</h2> <h3 class="heading-3 ace-line old-record-id-H0GodxFDuoycJMx1W7gukOq1sMg">Must Have</h3> <ul class="list-bullet1"> <li class="ace-line ace-line old-record-id-U6r5duGOzonaeixww5nuYtm5sbX" data-list="bullet"> <div>8+ years of information security experience, with at least 3 years in a CISO, Deputy CISO, or Head of Security role</div> </li> <li class="ace-line ace-line old-record-id-HGuFdcBl6oHMwlx0crKuAPZIsmf" data-list="bullet"> <div>Demonstrated experience working with Turkish financial regulators (SPK) or participating in TÜBİTAK-criteria audits</div> </li> <li class="ace-line ace-line old-record-id-TCycdV8OEodRgfxEb3Bufo58s5c" data-list="bullet"> <div>Strong knowledge of KVKK and its practical implementation</div> </li> <li class="ace-line ace-line old-record-id-FpMSdfkvPoeJfCx488ruuV5esmg" data-list="bullet"> <div>Solid understanding of cloud security, network security, and application security</div> </li> <li class="ace-line ace-line old-record-id-Xz9LdxWAGolrKFxq5avu9Q8tsCc" data-list="bullet"> <div>Experience building security programs in regulated financial institutions (banking, fintech, capital markets, or crypto)</div> </li> <li class="ace-line ace-line old-record-id-U3LQd3GfzoOWvnxKIuluGuCCsig" data-list="bullet"> <div>Excellent communication skills in both <strong>Turkish and English</strong></div> </li> <li class="ace-line ace-line old-record-id-F1nedAcQbo1zaexileduqhPVsFI" data-list="bullet"> <div>Strong risk management mindset; ability to translate technical risk into business impact</div> </li> </ul> <h3 class="heading-3 ace-line old-record-id-SU7bdomlkoMaU2xVh4DucLOAsJd">Nice to Have</h3> <ul class="list-bullet1"> <li class="ace-line ace-line old-record-id-DV9md8ALYoeyT9xlth3uuOfmscf" data-list="bullet"> <div>Direct experience at a cryptocurrency exchange or digital asset company</div> </li> <li class="ace-line ace-line old-record-id-TGDOdmLZ4oYkGWxHWUxuoiOWsab" data-list="bullet"> <div>Familiarity with cryptoasset custody security, cold/hot wallet architecture, and key management</div> </li> <li class="ace-line ace-line old-record-id-OW02dcOb4owmruxWi7fuFszts3b" data-list="bullet"> <div>Certifications: CISSP, CISM, CISA, ISO 27001 Lead Auditor</div> </li> <li class="ace-line ace-line old-record-id-XxS6d3WXXoSssYxcByduSTeXsqf" data-list="bullet"> <div>Exposure to multi-jurisdiction compliance (EU, KZ, etc.)</div> </li> </ul> </div><div class="content-conclusion"><p><strong>Why Join Us</strong><br>At Bybit, we are committed to fostering a supportive and enriching work environment.&nbsp;<br>Our benefits include:<br>- Study Growth Fund: We support your professional development and continuous learning.<br>- Internal Events: Participate in regular team-building activities, workshops, and events designed to promote collaboration and innovation.<br>- Global Collaboration: Be part of a diverse, international team, working alongside colleagues from around the world.<br>- Career Advancement: Access opportunities for growth and advancement within a rapidly expanding global company.<br>- Internal Mobility: Grow with us- Your long-term development is important to us. We offer internal job opportunities to help build your career path.</p></div>