Information Security Officer

Security Strategy & Baseline Framework Development Develop, implement, and maintain the company's overall security baseline framework covering production environments, corporate networks, key management, access controls, data classification, and other critical security domains. Regularly review and update policies to address evolving threats and ensure consistent security standards across all business units. Vulnerability Management & Penetration Testing Lead vulnerability identification, assessment, and prioritization efforts. Coordinate and/or conduct penetration testing activities, monitor remediation progress, ensure closure within agreed SLAs, and provide regular reporting of critical risks to the CEO. Key Management & Wallet Security (Custody Layer) Design and enforce security controls for digital asset custody operations, including hot and cold wallet management, key rotation processes, multi-signature (Multi-Sig) and MPC solutions. Lead security integration and configuration of enterprise custody platforms such as Cobo and similar providers, including transaction limits, whitelisting, approval workflows, and review mechanisms. Ensure all asset-related activities maintain a complete and auditable operational trail. Operational Security (OpSec) Implement security controls across customer fund movements, external communications, and data processing activities. Review and assess the security of CFD trading systems, payment channels, and integration interfaces. Enforce segregation of duties (SoD) to reduce risks arising from fraud, abuse, or operational errors. Security SOP Framework Develop, maintain, and continuously improve security-related SOPs covering areas such as account management, wallet operations, employee onboarding/offboarding, incident response, third-party onboarding, and emergency procedures. Drive implementation across departments and ensure periodic review and compliance. Executive & Key Personnel Security Develop digital security programs f…