Cybersecurity Engineer (Governance, Risk & Compliance)

职位描述:

- Serve as the primary compliance subject matter expert on critical projects (e.g., data security, cross-border data transfer compliance, personal data protection), ensuring security and data protection requirements are embedded by design.

- Collaborate closely with engineering, product, legal, and DevOps teams to guide the implementation of compliant technical solutions throughout the entire data lifecycle.

- Develop, maintain, and improve information security policies, standards, procedures, and guidelines.

- Lead and perform internal risk assessments across multiple frameworks, including ISO/IEC 27001/27701, GDPR, SOC2, PCI DSS and other relevant standards.

- Lead the end-to-end lifecycle of cybersecurity risk remediation activities, ensuring identified risks are effectively mitigated within agreed timelines.

- Manage international security operations, incident response, and regional liaison to adapt global strategies to local needs.

- Provide security architecture governance and oversight for new and existing technology solutions.

职位要求:

- A Bachelor's degree or higher in Computer Science, Information Systems, Cybersecurity, or a related field. Equivalent practical experience will be considered.

- Good understanding of data security principles (e.g., encryption, tokenization, data masking, access controls) and international data privacy regulations (GDPR, PDPA, etc.).

- Thrive in a fast-paced, dynamic environment and can effectively manage multiple priorities under pressure and tight deadlines.

- Exceptional ability to communicate in Mandarin and English, in order to support coordination and collaboration with Mandarin-speaking stakeholders, teams, and business partners across regional markets.

- Excellent project management and organizational skills, with a proven ability to collaborate effectively within multicultural and multi-functional teams.

- Professional certifications such as CISSP, CISA, PMP, CIPM, ISO 27XXX Lead Auditor, or other equivalent credentials are highly desirable.