Chief Information Security Officer (Korea)

Responsibilities

Regulatory & Compliance Leadership

• Own end-to-end security certifications — from gap assessment through to audit readiness and approval 

• Serve as the primary liaison to Korean financial regulators (FSC, FSSC, KISA) on all security and data protection matters

• Translate regulatory requirements into actionable security controls and communicate these effectively to global Binance teams

• Arrange and lead annual IT security risk assessments

Security Strategy & Operations

• Define and execute the information security strategy for Korea, aligned with global security standards

• Oversee cloud security architecture and ensure controls meet both global policy and local regulatory expectations

• Lead incident response, threat modeling, and vulnerability management programs across both markets

• Manage InfoSec teams, including hiring, mentoring, and performance management

Internal & Cross-functional Collaboration

• Partner closely with global CISO office, engineering, legal, and compliance teams

• Advocate for security requirements at the global level — push back when needed, align when appropriate

• Work with external consultants and third-party auditors supporting certification and audit cycles in both markets

Stakeholder Communication

• Report to leadership and maintain transparency on security posture, risk, and regulatory timelines

• Present risk assessments and security updates 

Requirements

• Bachelor's degree or higher in Information Technology, Cyber Security, or a related field
• 10+ years of information security experience, with at least 3–5 years in a senior leadership role (CISO, Head of Security, or equivalent)
• Hands-on experience with ISMS or ISMS-P certification in Korea — ideally as the accountable owner through a successful audit cycle
• Deep familiarity with Korean financial/digital asset regulatory requirements (FSC guidelines, PIPA, KISA standards)
• Strong understanding of cloud security and modern enterprise security architectures
• Proven ability to collaborate across functions — you work with engineering, compliance, and legal, not around them
• Bilingual English and Korean is required to be able to coordinate with overseas partners and stakeholders
• Strong ownership mindset — you drive outcomes, not status updates

Strongly Preferred

• Prior experience at a financial institution, crypto exchange, or fintech

• Experience managing a security function during a regulatory examination or enforcement period

• Experience engaging directly with regulatory bodies

• Relevant certifications: CISSP, CISM, CISA, ISO 27001 Lead Auditor, or equivalent