CISO

KuCoin TR is looking for an experienced Chief Information Security Officer (CISO) to oversee the local entity’s information security and cybersecurity framework. This role is responsible for ensuring alignment with applicable Turkish regulatory requirements, including those issued by the Capital Markets Board of Türkiye (SPK), TÜBİTAK, and other relevant authorities, as well as the Group’s security standards. Key Responsibilities Establish, maintain, and periodically review local information security policies, procedures, frameworks, and controls in line with Turkish regulatory requirements and Group standards. Monitor applicable information security and cybersecurity requirements for crypto-asset service providers in Türkiye, and coordinate implementation of requirements issued by SPK, TÜBİTAK, and other relevant authorities. Identify, assess, monitor, and report security risks across systems, infrastructure, applications, customer information, crypto-asset operations, and third-party services. Oversee security monitoring and coordinate the detection, investigation, escalation, containment, remediation, and reporting of security incidents and cyber threats. Oversee access governance, privileged access management, segregation of duties, and periodic access reviews. Ensure appropriate controls protect the confidentiality, integrity, and availability of sensitive information. Coordinate security controls for crypto-asset infrastructure, wallet technology, private-key management, custody-related systems, and blockchain integrations, where applicable. Coordinate vulnerability assessments, penetration testing, remediation activities, and periodic reviews of technical security controls. Assess and monitor information security risks associated with vendors, outsourced technology providers, cloud services, and other third parties supporting local operations. Work closely with local management, Group security teams, IT, engineering, compliance, and other stakeholders to strengthen the entity’s overall security posture. Qualifications Bachelor’s degree or above in Information Security, Cybersecurity, Computer Science, Information Technology, or a related field. Significant experience in information security or cybersecurity, including experience in a senior leadership or security management role. Strong knowledge of information security governance, cybersecurity risk management, security controls, incident response, and vulnerability management. Familiarity with Turkish regulatory requirements applicable to crypto-asset service providers, particularly information security requirements issued by SPK, TÜBİTAK, and other relevant authorities. Experience in financial services, fintech, banking, digital assets, or other regulated industries is highly preferred. Strong communication and stakeholder management skills, with the ability to coordinate effectively across local and global teams. Professional proficiency in Turkish and English.