Head of ICT Risk Management (DORA)

About Bybit:

Established in March 2018, Bybit is one of the fastest growing cryptocurrency derivatives exchanges, with more than 60 million registered users. We offer a professional platform where crypto traders can find an ultra-fast matching engine, excellent customer service and multilingual community support. We provide innovative online spot and derivatives trading services, mining and staking products, as well as API support, to retail and institutional clients around the world, and strive to be the most reliable exchange for the emerging digital asset class.

Bybit's founder and CEO, Ben Zhou, was formerly from XM, one of the world's largest forex and CFD trading brokerage firms. The company comprises professionals from investment banks, tech firms, the forex industry, and early adopters of blockchain. The development team includes talents from Morgan Stanley, Baidu, Alibaba, Tencent, etc.

Our core values define us. We listen, care, and improve to create a faster, fairer, and more humane trading environment for our users. Our innovative, highly advanced, user-friendly platform has been designed from the ground-up using best-in-class infrastructure to provide our users with the industry's safest, fastest, fairest, and most transparent trading experience. Built on customer-centric values, we endeavour to provide a professional, 24/7 multi-language customer support to help in a timely manner.

As of today, Bybit is one of the most trusted, reliable, and transparent cryptocurrency derivatives platforms in the space.

Responsibilities:

• Responsible for overseeing and maintaining ICT risk management policies, performing risk evaluations.
• They identify Critical and Important Functions (CIFs) and conduct Business Impact Analyses (BIAs), ensuring annual reviews to keep assessments up to date.
• Proactively manage ICT risks, ensuring organizational resilience and compliance with regulatory and operational requirements and establishing effective mitigation strategies

Qualifications:

• At least 5 years of IT compliance and IT risk management experience, with a degree in information security or a related discipline. Knowledge of risk assessment frameworks (e.g., NIIST, ISO 31000) and IT audit processes.
• Expertise in compliance frameworks, internal audits, and IT governance. Familiarity with relevant regulatory standards (e.g., ISO27001, GDPR)
• Relevant certifications are a plus.
• Prefer local Austrian to have better understand of local regulation.
• Prefer Candidate who speaks German to be able interact with local Authority.