Lead Security Management Engineer

About the Company

Established in 2018, Bybit is one of the world’s leading cryptocurrency exchanges and digital financial platforms, serving over 80 million users across more than 200 countries and regions. Powered by world-class technology and a user-first mindset, Bybit delivers a seamless ecosystem across trading, payments, wealth management, custody, institutional services, and Web3.

Responsibilities

• Cooperate with on-site inspections and remote reviews by regulatory agencies (OJK, Bappebti, Kominfo, etc.)
• Explain technical architecture and information security management systems to inspectors
• Prepare technical documents including system architecture diagrams and data flow diagrams
• Maintain local compliance systems and ensure alignment with headquarters ISMS framework
• Perform compliance gap analysis and maintain compliance document libraries
• Conduct information security threat and risk assessments
• Monitor access control policies and coordinate security incident responses
• Promote security awareness training and participate in third-party risk management
• Support internal and external audits such as ISO 27001 and SOC2
• Coordinate penetration testing and vulnerability scanning activities

Requirements

• 4-5 years of experience in information security or compliance
• Experience in regulatory reception or audit support (OJK, Bappebti, or Kominfo preferred)
• Familiarity with ISO 27001, SOC2, or NIST frameworks
• Experience with gap analysis and risk assessment
• Understanding of access control, incident response, and security training
• Fluent in Chinese and English (listening and speaking)
• Strong written expression skills
• Excellent XFN coordination and communication skills

Preferred Qualifications

• Proficiency in Indonesian
• Background in fintech, cryptocurrency, or financial services
• Relevant certifications such as CISA, CISSP, or ISO 27001 Lead Auditor
• Experience working with multinational companies and headquarters compliance teams

Benefits

• Study Growth Fund for professional development
• Regular internal team-building events and workshops
• Global collaboration with a diverse international team
• Opportunities for career advancement and internal mobility