Global Security Compliance COE

Bybit is hiring a Global Security Compliance COE in Kuala Lumpur, Malaysia. Level rates it ; you can apply on Bybit.

Level's read on this job

Little AI ●○○○ is how Level rates this role: aI is not part of the work.
Tools and skills the posting cites include SIEM, security compliance and risk assessment.
Level classifies it as a senior role.
Level lists 155 other open roles at Bybit.
The role was posted within the past two weeks.

AI in this role

Manage global security compliance, regulatory requirements, audits, and security operations governance at Bybit.

siem

security-compliancerisk-assessmentaudit-managementsecurity-operationsregulatory-compliance

About Us

Established in 2018, Bybit is one of the world’s leading cryptocurrency exchanges and digital financial platforms, serving over 80 million users across more than 200 countries and regions. Powered by world-class technology and a user-first mindset, Bybit delivers a seamless ecosystem across trading, payments, wealth management, custody, institutional services, and Web3 — connecting users to the future of digital finance. Our core values define how we build. We listen, care and improve to create products and experiences that put users first. Backed by a global team of ambitious builders, problem-solvers, and innovators, we foster a high-performance and fast-moving environment where talent is empowered to drive real impact at the global scale. Supported by 24/7 multilingual customer service and a strong commitment to innovation, we are shaping the future of finance through technology, collaboration, and bold execution. Today, Bybit is recognized as one of the most trusted and transparent platforms in the digital asset industry, continuing to expand its global presence while building the infrastructure for the next generation of financial services. Key Responsibilities

Compliance Requirements TranslationLiaise with local compliance teams across global regions to develop a deep understanding of the security technical requirements under various regulatory frameworks (e.g., EU DORA, Turkey CMB/Tubitak, Hong Kong SFC). Translate compliance requirements into actionable security platform product requirements and technical solutions.
Audit & Certification SupportLead or participate in security audit preparation for compliance entities, including internal audits, external audits, penetration test report reviews, and audit evidence compilation and delivery — ensuring accuracy and timeliness of all audit materials.
Security Operations GovernanceDrive the implementation of security policies, processes, and standards across compliance entities, covering control domains such as vulnerability management, log monitoring (SIEM), antivirus coverage, access rights reviews, and security awareness training.
License Application SupportParticipate in the security-related components of financial license applications across regional compliance entities; author technical documentation including security architecture descriptions, control matrices, and risk assessments.
Security Metrics ManagementAssist in establishing and maintaining security operations metrics frameworks for each compliance entity (coverage rates, SLAs, compliance rates, etc.); produce regular security operations reports.

────── Requirements

Bachelor's degree or above in Computer Science, Information Security, or a related field; 5+ years of experience in information security, with at least 3 years focused on security compliance governance, security auditing, or security operations.
Solid familiarity with mainstream security compliance frameworks and regulatory requirements such as ISO 27001, SOC 2, PCI DSS, and GDPR; knowledge of financial industry security regulations (e.g., DORA, MAS TRM) is a plus.
Strong security technical foundation with the ability to understand the working principles of security products and controls including SIEM, vulnerability scanning tools (Tenable/Orca/Nessus), EDR/antivirus, WAF, and IAM.
Hands-on experience participating in security audits (internal or external), with the ability to independently complete audit evidence preparation, control gap analysis, and remediation tracking.
Fluent in both Chinese and English; able to read regulatory documents in English, produce security compliance technical documentation, and communicate seamlessly with overseas teams.
Strong cross-functional communication and project execution skills; able to collaborate effectively across multiple time zones and cultural backgrounds.

────── Bonus Points

Prior security compliance experience at a cryptocurrency exchange, payment institution, large internet company, or fintech firm.
Experience building multi-region / multi-site security compliance frameworks (not limited to a single region).
Familiarity with security platform/product development; ability to derive platform feature requirements from compliance needs.
Experience as an ISO 27001 internal auditor or participation in a SOC 2 Type II audit.
Holds certifications such as CISSP, CISM, CISA, or ISO 27001 LA/LI.
Direct hands-on experience with specific regional regulatory frameworks such as DORA, Tubitak, or SFC.

Why Join Us
At Bybit, we are committed to fostering a supportive and enriching work environment.
Our benefits include:
- Study Growth Fund: We support your professional development and continuous learning.
- Internal Events: Participate in regular team-building activities, workshops, and events designed to promote collaboration and innovation.
- Global Collaboration: Be part of a diverse, international team, working alongside colleagues from around the world.
- Career Advancement: Access opportunities for growth and advancement within a rapidly expanding global company.
- Internal Mobility: Grow with us- Your long-term development is important to us. We offer internal job opportunities to help build your career path.

How we rate this

Global Security Compliance COE at Bybit rates 0 out of 100 for how much of the daily work is AI. That makes it Little AI (AI Level 1 of 4). The level is about AI in the job, not seniority.

Classification

Little AI. AI is not part of the work.

●●●● Builds AI80 to 100
●●●○ Works on AI60 to 79
●●○○ Uses AI40 to 59
●○○○ Little AI0 to 39

Levels come from how often the tools, models and workflows of the role are named in the posting itself. Read the description and count the AI tools, models and workflows it names.

Key facts

Global Security Compliance COE is an open job at Bybit.
Level rates this role AI Level 1 of 4: Little AI.
The role is based in Kuala Lumpur, Malaysia.
The job was posted on October 12, 2026.
Seniority: senior.
Applications are handled by Bybit. Apply on Bybit

Prepare for this job

Built from this posting and from similar jobs on Level.

Skills and AI tools this role asks for

Security ComplianceRisk AssessmentAudit ManagementSecurity OperationsRegulatory ComplianceSIEM

Questions you could be asked

Tell me about a project where security compliance was part of your work. What did you do?
Tell me about a project where risk assessment was part of your work. What did you do?
Tell me about a project where audit management was part of your work. What did you do?
Tell me about a project where security operations was part of your work. What did you do?
Tell me about a project where regulatory compliance was part of your work. What did you do?

Adapt your resume

List these exact terms on your resume: Security Compliance, Risk Assessment, Audit Management, Security Operations, and Regulatory Compliance. An applicant tracking system matches the wording, not the idea.
Attach one line of real, concrete experience to at least one of them. A tool named with nothing behind it rarely survives a human read.

Want an expert to read your CV for this job?

Free. Send your CV and the role you want next. We reply by email within 2 to 4 business days.

Get a free CV review Get an express CV review Check your resume with the ATS resume checker