Cybersecurity Engineer (Governance, Risk & Compliance)

Overview

We are looking for a highly capable and motivated Senior Information Security Compliance Engineer to join our innovative team. This role is crucial in driving our compliance and data security efforts, focusing on monitoring, applying, and validating controls aligned with top-tier security and privacy frameworks, particularly aimed at safeguarding sensitive information throughout its entire lifecycle.

Key Responsibilities

• Act as the lead subject expert on compliance matters for vital projects including data security, cross-border data transfer adherence, and personal data protection, ensuring security by design.
• Work closely with teams from engineering, product management, legal, and DevOps to steer the application of compliant technical solutions over the data lifecycle.
• Conduct and oversee internal risk assessments across multiple standards such as ISO/IEC 27001 and 27701, GDPR, SOC 2, PCI DSS, among others.
• Administer global security operations, coordinate incident responses, and serve as a regional intermediary to align global policies with local requirements.

Requirements

• Possess a Bachelor's degree or above in Computer Science, Information Systems, Cybersecurity, or a comparable discipline; equivalent hands-on experience will also be considered.
• Have over 4 years of practical experience in information security, with at least 2 years dedicated to data security, compliance, risk management, and governance.
• Strong expertise in data security technologies including encryption, tokenization, data masking, and access control mechanisms, along with a thorough understanding of international data privacy laws such as GDPR and PDPA.
• Ability to thrive in a rapid, evolving workplace while managing multiple complex tasks within stringent deadlines.
• Exceptional proficiency in both written and spoken Mandarin and English.
• Excellent project management capability and organizational skills, with a demonstrated record of successful collaboration within culturally and functionally diverse teams.
• Professional certifications like CISSP, CISA, PMP, CIPM, ISO 27XXX Lead Auditor, or equivalent are highly valued.