Cyber Security Engineer, Technology Governance and Compliance

About Us

Established in 2019, Matrixport is the world's leading hub for all-in-one crypto financial services. We are committed to building an entry-grade ecosystem for the crypto space, by providing every user with a personalized super account that integrates products and services of crypto assets trading, investment, loan, custody, RWA, research and more. Through our diverse products and services, we empower users to achieve sustainable earnings from their crypto investments.

Matrixport holds licenses such as the Hong Kong Trust or Company Service Provider (TCSP）& Money Lender License, an Appointed Representative (AR) in the UK. We are also registered as a Money Services Business (MSB) in the US and a member of Switzerland’s FINMA SRO-VFQ, ensuring our services meet the highest global standards and providing users with secure and compliant crypto financial solutions.

As Matrixport continually reshapes the business landscape of crypto assets appreciation at the core, we continuously introduce our offers, and keep integrating the crypto sectors to create a closed-loop ecosystem for crypto services, making it easy for everyone to access the crypto space and enjoy potential earnings of cryptocurrency.

Why Join Us

At Matrixport, we tackle complex problems as a team. We encourage openness and promote transparency, respect, and inclusivity. Every team member is valued and has a voice that can be heard. We are always in the search for intellectually curious and entrepreneurial individuals who are keen on making an impact in the crypto ecosystem, and in building a better product for the next one billion users.

Responsibilities
• Design and maintain systems that ensure continuous adherence to industry best practices, applicable technologies, regulatory requirements, and standards such as ISO 27001, ISO 27701, SOC 1/2, NIST, and CIS Benchmarks.
• Manage third-party security assessments and due diligence requests from regulatory bodies and auditors.
• Perform and oversee information security and control assessments to verify compliance with internal security policies and external standards.
• Evaluate existing security measures and processes to pinpoint opportunities for enhancement.

Requirements
• Bachelor's degree in Computer Science, Information Systems, or a related technical discipline.
• Strong communication skills to collaborate with various stakeholders in English.
• 2+ years of work experience in Risk Assurance, Risk & Control or Governance & Compliance.
• Prior involvement with at least one of the following frameworks and regulatory requirements is preferred: MAS Technology Risk Management Guidelines and Cyber Hygiene Notice, NIST Cybersecurity Framework, ISO 27001 / 27701, SOC 2, GDPR.
• Strong problem-solving and project execution skills.
• Professional qualification holder will be an advantage: CIPP/E (US/A/CN), CIPT, CIPM, CISA, CISSP, CRISC or ISO 27001 LA.
• Fluency in both Mandarin Chinese and English is required.
• Immediately available will be preferred.

By submitting a job application, you confirm that you have read and agree to our Candidate Privacy Policy.