Cybersecurity Engineer (Governance, Risk & Compliance)

Job Overview

We are looking for an experienced and driven Senior Information Security Compliance Engineer to become a key member of our team focused on compliance and data security. This role is crucial for ensuring adherence to security and privacy standards, emphasizing safeguarding sensitive information throughout its lifecycle.

Key Responsibilities

• Act as the primary compliance expert for major initiatives such as data security, cross-border data transfer compliance, and personal data protection, integrating security requirements from the outset.
• Work closely with engineering, product management, legal, and DevOps teams to implement technical solutions that comply with data security standards across all data stages.
• Lead and conduct internal risk assessments conforming to frameworks such as ISO/IEC 27001/27701, GDPR, SOC2, PCI DSS, among others.
• Oversee global security operations and incident response, coordinating to tailor worldwide strategies to specific regional needs.

Qualifications

• Possess a Bachelor's degree or higher in Computer Science, Information Systems, Cybersecurity, or related disciplines; equivalent practical experience also considered.
• Have at least four years of practical experience in information security, including a minimum of two years concentrating on data security, compliance, risk management, and governance.
• Strong knowledge of data security methodologies such as encryption, tokenization, data masking, and access control, alongside understanding international privacy laws like GDPR and PDPA.
• Ability to excel in fast-moving environments, managing multiple priorities efficiently under pressure and tight deadlines.
• Fluent verbal and written communication abilities in Mandarin and English are mandatory.
• Well-developed project management and organizational skills, with demonstrated aptitude for collaboration in diverse, multicultural teams.
• Professional certifications like CISSP, CISA, PMP, CIPM, ISO 27XXX Lead Auditor, or similar distinguished credentials are highly beneficial.