Back to all Cybersecurity jobs
Industry not specified
Deputy Chief Information Security Officer (CISO), US
at OKX
Tech LeadNo visa sponsorshipCybersecurity
Posted 16 hours ago
No clicks
- Compensation
- $250,444 – $375,666 USD
- City
- Country
- United States
Currency: $ (USD)
**Deputy CISO in US Leads Information Security, Needs 8+ Years' Experience, Drive Compliance, Enhance Infrastructure, Manage Cybersecurity Teams. Proficient in NIST, CIS Top 20, ISO 27001. Experience with SIEM, IAM, and incident response crucial. Growth opportunities in strategic security planning, vendor management, and budget oversight. Apply now.**
Who We Are
At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles: We Before Me, Do the Right Thing, and Get Things Done. These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er.
About the opportunity
We're looking for a security leader for the Americas who's equally comfortable in front of a regulator, inside a risk assessment, or reviewing a piece of technical architecture as part of a lean team. You'll start as Deputy CISO, Americas, with a path to taking on the full Regional CISO role as you build track record in the seat. How quickly that happens is up to you.
This isn't a role for someone who wants to operate purely at policy level, nor for a deep specialist engineer who wants to be configuring tools. It's for someone who can move between both worlds: fluent enough in the technical detail to challenge the Engineers or spot a gap in an architecture review, but credible enough in governance to own a regulatory conversation or a board pack. This is a lean team, so we're not looking for someone to sit back and build a big team under them, this is a direct delivery role. More than anything, we want someone hungry to learn, genuinely curious, and comfortable solving problems they haven't solved before — that matters more to us than ticking every experience box.
What you'll be doing
- Leading on audit defence, risk assessments, and technical architecture reviews across the Americas estate — this is a working role, not an oversight one.
- Own the Americas security risk and compliance programme: policy, controls, risk register, regulatory engagement, and reporting.
- Manage the US GRC lead directly, and work closely with the US SecOps team lead on operational risk and incident response.
- Build relationships with Legal, Compliance, Risk and Internal Audit, and represent security in Americas leadership forums.
- Prepare for and take an increasing share of regulator and licensing engagement, building toward owning it outright.
- Spot what's missing before it becomes a problem, raise an issue, build an action plan and drive it through to delivery.
What we look for
- A security professional with solid GRC and risk grounding, ideally from a regulated industry — TradFi (bank, broker-dealer, payments) or regulated crypto is a strong plus, though direct crypto experience isn't required.
- Enough technical depth to hold your own in an architecture or risk conversation with highly technical engineers — you don't need to be the most technical person in the room, but you can't be lost in it either.
- A track record of genuine curiosity and self-directed learning over pure years-of-experience — we'd rather hire the sharp problem-solver who's two years light on paper than the person coasting on a long CV.
- Confident, clear communication with executives, auditors and regulators alike.
- Comfortable with ambiguity.
- Happy to work as part of a lean team and within an outsourcing model to central Group affiliates.
Nice to have
- Direct exposure to NYDFS, SEC, FinCEN or similar regulators.
- Prior experience in a role explicitly building toward a CISO or equivalent leadership seat.
- Digital assets or crypto industry familiarity.
Perks & Benefits
- Competitive total compensation package
- L&D programs and Education subsidy for employees' growth and development
- Various team building programs and company events
- Wellness and meal allowances
- Comprehensive healthcare schemes for employees and dependents
- More that we love to tell you along the process!
OKX Statement:
OKX is committed to equal employment opportunities regardless of race, color, genetic information, creed, religion, sex, sexual orientation, gender identity, lawful alien status, national origin, age, marital status, and non-job related physical or mental disability, or protected veteran status. Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.
The salary range for this position is $250,444 to $375,666.
The salary offered depends on a variety of factors, including job-related knowledge, skills, experience, and market location. In addition to the salary, a performance bonus and long-term incentives may be provided as part of the compensation package, as well as a full range of medical, financial, and/or other benefits, dependent on the position offered. Applicants should apply via OKX internal or external careers site.
#LI-SK1
#LI-HYBRID
#LI-HYBRID
Notice:
All official OKX vacancies are published on this website. While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated. If in doubt, please apply directly through our official careers website.
Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to OKX's Candidate Privacy Notice.
