IT Security & Compliance

The IT Compliance Officer is responsible for ensuring that the companys information technology systems and processes comply with regulatory requirements and for developing and implementing effective governance frameworks to minimize risks and enhance the security and reliability of information assets. This position requires collaboration with cross-functional teams to oversee compliance processes and coordination with internal and external audit departments to ensure compliance with all applicable laws, regulations, and industry standards.

Key Responsibilities:

Manage and execute the companys IT compliance strategy and procedures to ensure alignment with applicable regulations (such as GDPR, PCI DSS, ISO 27001, etc.).

Collaborate with internal teams to develop and implement compliance training programs to enhance employee awareness and understanding of information security and compliance.

Assist in developing and implementing information security policies, procedures, and control measures to ensure the confidentiality, integrity, and availability of company information assets.

Oversee compliance assessments of IT systems and processes and identify and address any compliance breaches or potential risks.

Manage communication and coordination with external compliance audits, providing necessary support and information to ensure the successful completion of audits.

Ensure that the companys IT backup and recovery strategies comply with industry best practices and regulatory requirements.

Supervise license management and software asset management processes to ensure the legal use and control of company software.

Ensure that IT projects and new technology deployments comply with compliance standards and provide necessary review and guidance.

Additionally, the IT Compliance/Governance will:

Collaborate with internal stakeholders to define project scope, objectives, and deliverables.

Develop and maintain project plans, timelines, and budgets to ensure successful project execution.

Identify and mitigate project risks and issues to ensure project success.

Monitor and report on project progress to stakeholders and senior management.

Provide strategic direction and leadership in IT architecture planning and design.

Collaborate with IT teams to develop and implement scalable and secure IT architecture solutions.

Ensure that IT architecture solutions comply with regulatory requirements and industry best practices.

Provide guidance and support to IT teams in implementing and maintaining IT architecture solutions.

Stay informed about emerging technologies and industry trends to inform IT architecture decisions and strategies.

Qualifications:

Bachelors degree or higher in Computer Science, Information Technology, Information Systems Management, or a related field.

At 3-7 years of experience in IT compliance/governance

Familiarity with GDPR, PCI DSS, ISO 27001, and other regulatory standards, with relevant certifications preferred.

Excellent communication and teamwork skills, with the ability to effectively communicate with employees at all levels and management.

Strong problem-solving and decision-making skills, with the ability to react quickly and develop contingency plans in emergency situations.

Strong sense of responsibility and commitment, with the ability to work independently and handle multiple tasks.

Excellent project management skills, with the ability to effectively manage and drive the progress of compliance projects.

Experience in law enforcement agencies, audit firms, or law firms is a plus.

Previous experience in Fintech is desirable, and the ability to thrive in a fast-paced work environment is essential.

Proficiency in Mandarin language, including reading and writing, is required.