Chief Information Security Officer (CISO) - Turkey

About the role

KuCoin TR is looking for an experienced Chief Information Security Officer to oversee the local entity's information security and cybersecurity framework. The role ensures alignment with Turkish regulatory requirements, including those of the Capital Markets Board of Türkiye (SPK), TÜBİTAK and other authorities, as well as the Group's security standards.

Key responsibilities

• Establish, maintain and periodically review local information security policies, procedures, frameworks and controls in line with Turkish regulations and Group standards.
• Monitor information security and cybersecurity requirements for crypto-asset service providers in Türkiye and coordinate their implementation.
• Identify, assess, monitor and report security risks across systems, infrastructure, applications, customer data, crypto-asset operations and third-party services.
• Oversee security monitoring and coordinate detection, investigation, escalation, containment, remediation and reporting of security incidents and cyber threats.
• Oversee access governance, privileged access management, segregation of duties and periodic access reviews, protecting the confidentiality, integrity and availability of sensitive information.
• Coordinate security controls for crypto-asset infrastructure, wallets, private-key management, custody systems and blockchain integrations.
• Coordinate vulnerability assessments, penetration testing, remediation and periodic reviews of technical controls.
• Assess and monitor vendor, cloud and third-party security risks.
• Work with local management, Group security teams, IT, engineering and compliance to strengthen the entity's security posture.

Required profile

• Bachelor's degree or above in Information Security, Cybersecurity, Computer Science, Information Technology or a related field.
• Significant experience in information security or cybersecurity, including a senior leadership or security management role.
• Familiarity with Turkish crypto-asset provider regulations, especially SPK and TÜBİTAK requirements.
• Experience in financial services, fintech, banking, digital assets or other regulated industries is highly preferred.
• Strong communication and stakeholder management skills; professional proficiency in Turkish and English.