Americas Regional Chief Information Security Officer (CISO)

OKX•San Jose, CA

2h•$250,444 - $375,666•Hybrid

About The Position

We're looking for a security leader for the Americas who's equally comfortable in front of a regulator, inside a risk assessment, or reviewing a piece of technical architecture as part of a lean team. You'll start as Deputy CISO, Americas, with a clear and genuine path to taking on the full Regional CISO role as you build track record in the seat. This isn't a role for someone who wants to operate purely at policy level, nor for a deep specialist engineer who wants to be configuring tools. It's for someone who can move between both worlds: fluent enough in the technical detail to challenge the Engineers or spot a gap in an architecture review, but credible enough in governance to own a regulatory conversation or a board pack. This is a lean team, so we're not looking for someone to sit back and build a big team under them, this is a direct delivery role. More than anything, we want someone hungry to learn, genuinely curious, and comfortable solving problems they haven't solved before — that matters more to us than ticking every experience box.

Requirements

A security professional with solid GRC and risk grounding, ideally from a regulated industry — TradFi (bank, broker-dealer, payments) or regulated crypto is a strong plus, though direct crypto experience isn't required.
Enough technical depth to hold your own in an architecture or risk conversation with highly technical engineers — you don't need to be the most technical person in the room, but you can't be lost in it either.
A track record of genuine curiosity and self-directed learning over pure years-of-experience — we'd rather hire the sharp problem-solver who's two years light on paper than the person coasting on a long CV.
Confident, clear communication with executives, auditors and regulators alike.
Comfortable with ambiguity.
Happy to work as part of a lean team and within an outsourcing model to central Group affiliates.

Nice To Haves

Direct exposure to NYDFS, SEC, FinCEN or similar regulators.
Prior experience in a role explicitly building toward a CISO or equivalent leadership seat.
Digital assets or crypto industry familiarity.

Responsibilities

Leading on audit defence, risk assessments, and technical architecture reviews across the Americas estate — this is a working role, not an oversight one.
Own the Americas security risk and compliance programme: policy, controls, risk register, regulatory engagement, and reporting.
Manage the US GRC lead directly, and work closely with the US SecOps team lead on operational risk and incident response.
Build relationships with Legal, Compliance, Risk and Internal Audit, and represent security in Americas leadership forums.
Prepare for and take an increasing share of regulator and licensing engagement, building toward owning it outright.
Spot what's missing before it becomes a problem, raise an issue, build an action plan and drive it through to delivery.