Cybersecurity Engineer (Governance, Risk & Compliance)

Responsibilities

• Lead compliance initiatives by tracking, implementing, and validating controls aligned with security and privacy frameworks to protect sensitive data throughout its lifecycle
• Serve as the primary compliance expert on projects involving data security, cross-border data transfer compliance, and personal data protection, ensuring security requirements are integrated by design
• Collaborate with engineering, product, legal, and DevOps teams to guide the development and deployment of compliant technical solutions across the data lifecycle
• Develop, maintain, and enhance information security policies, standards, procedures, and guidelines to uphold compliance and security best practices
• Lead and conduct internal risk assessments across frameworks such as ISO/IEC 27001/27701, GDPR, SOC2, PCI DSS, and other relevant standards to identify and mitigate risks
• Manage the full lifecycle of cybersecurity risk remediation activities, ensuring timely mitigation of identified risks
• Oversee international security operations, incident response, and regional coordination to tailor global security strategies to local requirements
• Provide governance and oversight on security architecture for new and existing technology solutions to ensure compliance and risk mitigation

Preferred competencies and qualifications

• Professional certifications such as CISSP, CISA, PMP, CIPM, ISO 27XXX Lead Auditor, or equivalent credentials
• Bachelor’s degree or higher in Computer Science, Information Systems, Cybersecurity, or related field, or equivalent practical experience
• Minimum 2 years of hands-on experience in information security, with at least 2 years focused on data security, compliance, risk, and governance (GRC)
• Strong understanding of data security principles including encryption, tokenization, data masking, and access controls, as well as international data privacy regulations such as GDPR and PDPA
• Proven project management and organizational skills with experience collaborating effectively within multicultural and cross-functional teams
• Ability to manage multiple priorities effectively in a fast-paced environment under tight deadlines
• Proficiency in Mandarin to support coordination and collaboration with Mandarin-speaking stakeholders and regional teams
• Proficiency in English for effective communication and collaboration across teams