Responsibilities

Lead compliance initiatives by tracking, implementing, and validating controls aligned with security and privacy frameworks to protect sensitive data throughout its lifecycle
Serve as the primary compliance expert on projects involving data security, cross-border data transfer compliance, and personal data protection, ensuring security requirements are integrated by design
Collaborate with engineering, product, legal, and DevOps teams to guide the development and deployment of compliant technical solutions across the data lifecycle
Develop, maintain, and enhance information security policies, standards, procedures, and guidelines to uphold compliance and security best practices
Lead and conduct internal risk assessments across frameworks such as ISO/IEC 27001/27701, GDPR, SOC2, PCI DSS, and other relevant standards to identify and mitigate risks
Manage the full lifecycle of cybersecurity risk remediation activities, ensuring timely mitigation of identified risks
Oversee international security operations, incident response, and regional coordination to tailor global security strategies to local requirements
Provide governance and oversight on security architecture for new and existing technology solutions to ensure compliance and risk mitigation

Preferred competencies and qualifications

Professional certifications such as CISSP, CISA, PMP, CIPM, ISO 27XXX Lead Auditor, or equivalent credentials
Bachelor’s degree or higher in Computer Science, Information Systems, Cybersecurity, or related field, or equivalent practical experience
Minimum 2 years of hands-on experience in information security, with at least 2 years focused on data security, compliance, risk, and governance (GRC)
Strong understanding of data security principles including encryption, tokenization, data masking, and access controls, as well as international data privacy regulations such as GDPR and PDPA
Proven project management and organizational skills with experience collaborating effectively within multicultural and cross-functional teams
Ability to manage multiple priorities effectively in a fast-paced environment under tight deadlines
Proficiency in Mandarin to support coordination and collaboration with Mandarin-speaking stakeholders and regional teams
Proficiency in English for effective communication and collaboration across teams