Senior Cybersecurity Specialist

Company Overview:

Mitrade is an award-winning global Contract for Difference (CFD) and forex broker, regulated by authorities in Australia (ASIC), Cyprus (CySec), the Cayman Islands (CIMA), and Mauritius (FSC). We were founded in Melbourne, Australia and have offices worldwide.

Leveraging our proprietary state-of-the-art technology, Mitrade has developed an integrated digital service platform tailored for investors. We offer market data, news, and analysis, as well as trading and risk management services within a comprehensive user-centric Fintech ecosystem. Serving more than three million users globally, Mitrade is accessible via various platforms such as mobile (iOS and Android), desktop applications, and web browsers.

Role Summary:

We are currently seeking a dynamic and experienced Senior Cybersecurity Specialist to join our team. This role is responsible for planning and implementing cybersecurity strategies to meet industrial (e.g. PCI) and regulatory (e.g. ASIC/CySEC) compliance requirements.

If you have expertise and experience in cybersecurity and a strong interest in securing global online trading platforms. Then this position is an excellent opportunity for you!

Job Description:

The role is focused on planning, creating the necessary frameworks, roadmaps, processes and control, as well as coordinating across business and technical stakeholders to monitor and detect security threats, responding to security incidents.

• Plan and implement the company’s cyber/info-security efforts to ensure we meet the info-security requirements laid out by the relevant financial services regulators. This refers to both our customer-facing platforms and systems, as well as internal user systems (e.g. M365).
• Be responsible for planning and building the company's cyber security system and protection system, continuously improving cyber security management and environment to ensure the security and availability of network systems.
• Manage the company’s response and relationship to info-security-related audits/ compliance matters and queries from regulators or appointed auditors. This role will be responsible for security compliance work, including PCI/GDPR audits and IT security compliance matters related to financial regulations.
• Responsible for daily security checks, analysis, and detection of potential security threats and vulnerabilities in the company's business systems and internal office environment, as well as security audits and employee security awareness training.
• Responsible for the safety inspection in the company's R&D process and the optimization and construction of related processes.
• Handle internal and external network attacks, phishing attacks, virus infections, intrusion defense, and other security incidents, as well as corresponding monitoring, early warning, response, and emergency response.

Job Requirements:

• 5 years or above of experience in information security/ cyber security.
• Familiar with OWASP Top 10 and DDoS attack principles and protection.
• Familiar with information security/ cybersecurity skills such as offense and defense, penetration testing, and vulnerability mining;
• Familiar with commonly used security tools and products.
• Familiar with one or more public cloud security products.
• Familiar with TCP/IP principles.
• Proficient in both Chinese and English, including daily communication and handling of IT compliance/audit documents.

Mitrade is at the cutting edge of FinTech with a team that excels in a fast-paced, collaborative environment. We seek analytical thinkers and executors with a data-driven approach, capable of managing complex multistakeholder projects and adapting to technological advancements.

You will shine in this role if you have/are:

• Experience in PCI compliance or familiarity with NIST network security risk management specifications.
• Proven cases of successful penetration testing or intrusion detection and prevention.
• Hold information security certifications such as CCIE/HCIE/CISP/CISSP/CCSP and have technical consulting experience in security consulting firms.
• Experience in writing projects with systematic security tools.
• Experience in handling global financial regulatory network security and data security compliance (e.g. Australia, Europe).
• Possess an open mindset, a desire to learn, and a "growth mindset" attitude.
• Able to collaborate smoothly with stakeholders from different teams and locations (business or technical) to solve problems and participate in project works.
• Not limited by traditional approaches and convention issues, but open to exploring and implementing alternative creative, non-traditional, and compliant solutions.
• Possess a framework mindset and analytical ability: able to analyze situations and ideas clearly with structured and logical thinking.
• Resilient and perseverant: not easily discouraged by difficult situations and setbacks.
• Self-starter - proactive in identifying problems and finding solutions.
• Highly adaptable and flexible - able to change and adapt as needed.

What You Can Look Forward To:

• Competitive compensation package.
• Career growth and personal development within a growing global organization.
• A flat organizational structure that values collaboration and transparency.