> Markdown version of [/jobs/ext/4210329-global-chief-information-security-officer-ciso](https://www.wearedevelopers.com/jobs/ext/4210329-global-chief-information-security-officer-ciso). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Global Chief Information Security Officer (CISO)

- **Company:** ONE STOP COLLECTIBLE CORP
- **Location:** United States (Remote available)
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Software System Penetration Testing, Cyber Security, PCI Data Security Standards, Blockchain, Secure Coding, Software Engineering, Software Vulnerability Management, Web3.js, Vulnerability Analysis
- **Published:** October 12, 2026
- **Apply:** https://startup.jobs/global-chief-information-security-officer-ciso-cexio-8059214

## About the Role

* Experience: Proven track record in a senior security leadership role (CISO, Director of Security, or Head of Information Security) within the Financial Services or FinTech sector.
 * Direct experience steering organisations through complex information security audits, certifications, licensing, and international regulatory compliance.
 * Demonstrated experience in creating, implementing, and managing group-level security processes and frameworks.
 * Exceptional leadership skills with a proven ability to manage remote, distributed teams. Strong sense of ownership, proactiveness, and high responsibility.
 * Language: Fluent English with excellent communication and reporting skills; Ukrainian or Russian will be an advantage.
 * Location: Must be physically located and legally authorised to work remotely within Europe.

Preferred (Nice-to-Haves)

 * Hands-on experience in the Cryptocurrency, Web3, or Blockchain industry, understanding specific security vectors (custody, cold/hot wallet security)

## Description

InfoSecurity Strategy & Governance:

 * Define, drive, and execute the global information security roadmap aligned with business goals
 * Assess and define CEX.IO's current and future requirements in terms of information security
 * Identify capability gaps in the context of regulatory considerations and industry benchmarks

Process Management:

 * Build, implement, and optimise robust security processes, frameworks, and policies across the entire organisation from the ground up.
 * Ensure all target teams are provided with the training and resources needed to perform their jobs to the highest degree possible

Compliance, Certifications & Audits:

 * Oversee the successful acquisition and maintenance of industry-specific licenses and certifications (e.g., SOC 2, PCI-DSS, DORA, MiCA/crypto regulations). Manage regular internal/external security audits and executive reporting.
To achieve this, you will closely collaborate with:

 * External auditors and regulators, acting as the primary technical point of contact and subject matter expert during corporate certification processes and regulatory reviews.
 * Legal and data protection team to ensure information security policies strictly map to European GDPR compliance, data privacy laws, and corporate governance standards.
 * Managing Directors and Officers within the UK, US, and ES locations to bridge global information security frameworks with local regulatory mandates and licensing requirements.
 * Engineering and Product teams to embed security directly into the software development lifecycle and product roadmap. You will collaborate on secure coding practices, vulnerability management, and ensuring that product architectures (especially crypto/wallet features) are secure by design before release.

Team Leadership:

 * Lead, mentor, and scale a high-performing, fully remote security team.
 * Foster a culture of accountability and proactiveness.
 * Lead all managerial functions in accordance with the company's policies and procedures (hiring, training, setting goals, appraising performance, budgeting)

Risk & Incident Management:

 * Act as the ultimate point of escalation for global security incidents, ensuring proactive threat hunting and rapid mitigation.
 * Manage the oversight of technical risk assessments, such as vulnerability scanning, penetration testing, risk reviews for new applications, and third-party risk assessments