Security Lead
Startale Group is an onchain technology company providing blockchain ecosystems, developer infrastructure, consumer applications and digital-asset products.
Funding history
About Startale Group Pte. Ltd.
Startale Group Pte. Ltd. is the company identified in the Startale Cloud Services terms and operates the Startale Developer Platform. The wider Startale ecosystem also includes consumer applications and stablecoin products operated by distinct affiliated entities: Startale Labs (BVI) Ltd provides Startale App, and Startale Development (BVI) Ltd operates the Startale USD website and its swap and vault features. Group funding and hiring remain attributed to Startale Group.
Skills
Candidate Availability
About the Role
You will build the security and system risk posture from scratch to support registration review and operations. You will prepare explanations for the Financial Services Agency and banks, create security policies and incident response procedures, design key management controls, manage outsourced vendors, handle bank security checksheets, commission audits and penetration tests, and lead initial incident response.
Requirements
- Native Japanese
- Advanced business-level English
- Experience as head or manager of information security or system risk management at a Japanese crypto exchange, electronic payment instrument operator, bank or securities firm
- Experience handling systems aspects of FSA inspections, monitoring or registration review
- Understanding of cold wallet, HSM, multisig and MPC and ability to explain them
- Experience assessing cloud (AWS) security
Responsibilities
- Prepare system risk explanations and answers for FSA pre-consultation and registration review
- Develop and operate information security policy, system risk management policy, incident response procedures and BCP
- Design and explain key management controls (MPC wallets, multisig, HSM, signing workflows)
- Manage and evaluate outsourced vendors (wallet, cloud, eKYC, on-chain monitoring)
- Respond to bank security checksheets based on FISC standards
- Commission smart contract audits and penetration tests, evaluate results and manage remediation
- Design on-chain monitoring and alert operations and support risk and compliance lead on eKYC/AML technical aspects
- Lead initial incident response and compile technical aspects of regulator reports
Benefits
- Annual company-wide workation
- Discretionary vacation policy
- Investment in AI tools
Hiring Process
Optional casual interview, document screening, first interview, second interview, final interview, then offer meeting. Reference check in final phase. Mostly online; takes about 2-4 weeks.