Security Officer

About the Company A leading real-world asset (RWA) tokenization platform, renowned for its unmatched focus on regulatory standards and advanced financial technology.

Founded in 2022, the company bridges traditional and decentralized finance by providing, through its regulated entities in two offshore jurisdictions, secure, transparent, and compliant on-chain access to tokenized RWA.

The firm is tokenizing global finance with a core focus on compliance and innovation. About the Role We are seeking an IT Security Lead to oversee and enhance security across cloud infrastructure, internal systems, and digital asset operations, aligned with regulatory standards for TRM and Cyber Security.

This is a hands-on individual contributor role, focused on the design, implementation, and ongoing management of security controls. The successful candidate will work closely with Engineering to ensure secure system design and operations, and partner with the CRO and CISO on risk, governance, and security oversight.

What We Offer

A chance to directly contribute to the success and growth of one of the most reputable and regulated RWA tokenization platforms in the space, with a proven commercial track record

Supportive culture that values clear communication and high-quality execution

Competitive compensation

Eligibility to participate in the Employee Stock Option Scheme and token incentive allocation

Flexible work arrangements

Responsibilities

Own and maintain security controls across AWS (IAM, access, logging, network security)

Identify and remediate threats, vulnerabilities, misconfigurations, and access risks across systems

Maintain and actively manage the Technology Risk Management (TRM) register, including risk identification, tracking, and remediation

Act as the security gatekeeper, performing security reviews of all new features, smart contract integrations, and system architectures prior to launch

Act as the primary owner of security vendors (MSSP, monitoring tools, Web3 security providers), ensuring effective coverage and response capability

Monitor system health, investigate security alerts, and lead incident response, including coordination with internal teams and external providers for containment, recovery, and escalation

Design and maintain institutional-grade wallet and transaction security controls, ensuring the integrity of minting and redemption processes

Lead third-party and vendor risk reviews, including technical due diligence for integrations, web3 protocols, and service providers

Support the testing and continuous improvement of disaster recovery and resilience processes

Maintain and enhance recovery procedures for critical systems

We Are Looking For Someone Who

5–8 years in IT security, security engineering, or DevSecOps, with at least 2–3 years specifically within crypto or a web3-native environment

Experience working within a regulated environment (e.g. MAS, BMA, FCA, SEC) preferred

Strong hands-on experience in cloud security (AWS preferred: IAM, logging, networking)

Strong understanding of blockchain security fundamentals (Ethereum/EVM, smart contract vulnerabilities, and oracle risks)

Hands-on builder, can design and implement independently

Experience working with or managing external security vendors

Experience in startups / fast-moving environments

Preferred Qualifications

Familiarity with custody providers (e.g. Fireblocks)

Experience supporting audits (ISO / SOC2)

Originally posted on Himalayas