Our client is a premier regulated real-world asset (RWA) tokenization platform. Founded in 2022, we bridge traditional finance and Web3 by offering secure, compliant, and transparent on-chain access to tokenized financial assets.

The Role

We are looking for a hands-on IT & Security Lead to own our security architecture across two critical fronts: Corporate IT/Identity Governance and Cloud/Digital Asset Security. Reporting directly to the CTO, you will design, implement, and automate security controls that align with regulatory frameworks (MAS, BMA) and institutional risk standards.

What You Will Do

• Identity & Access Governance: Administer SSO/IdP (Okta/Entra/JumpCloud) with phishing-resistant MFA. Execute strict same-day provisioning/deprovisioning across systems, production, and multi-sig signing authority.

• Device & Fleet Security: Manage company devices via MDM (Jamf/Kandji/Intune), enforcing full-disk encryption, EDR, patch management, and automated compliance reporting.

• AWS & Infrastructure Hardening: Own cloud security across AWS (IAM, network security, logging). Drive threat detection, vulnerability management, and incident response alongside DevOps.

• Web3 & Custody Operations: Design institutional-grade multi-sig workflows, hardware wallet security, and signing ceremonies to secure mint/burn RWA operations.

• Automation-First Operations: "Script the answers." Build automated workflows in Python/Bash for access reviews, compliance evidence, and offboarding checks—if a task can be automated, you automate it.

• Risk & Regulatory Readiness: Maintain the Technology Risk Management (TRM) register, gatekeeper new feature/smart contract rollouts, and generate evidence for ISO 27001 / SOC 2 audits.

What We’re Looking For

• Experience: 5–8 years in IT Security, with 2–3+ years in a Web3 / Crypto-native ecosystem.

• Identity & Cloud Expertise: Hands-on experience configuring IdP provisioning rules (SCIM, SAML/OIDC) and hardening AWS environments.

• Technical Skills: Fleet MDM management, Linux/SSH administration, and scripting capabilities in Python or Bash.

• Blockchain Knowledge: solid understanding of EVM networks, smart contract security risks, and digital asset custody workflows (e.g., Fireblocks, hardware wallets).

• Mindset: Documentation discipline, clear escalation judgment, and the composure to hold firm with senior stakeholders when security requires a "no."

First 90-Day Milestones

• 100% of corporate systems protected by SSO + phishing-resistant MFA.

• Full access inventory mapped across corporate, AWS, production, and signing keys.

• Verifiable, same-day offboarding automation fully operational.