IT Security Director/Sr. Manager

We are seeking an experienced IT Security Manager / Senior IT Security Engineer to establish and maintain a secure, compliant, and audit-ready IT environment for a fabless semiconductor design house. This role will protect company IP, customer data, engineering systems, and business operations while supporting Tier-1 customer security audits and industry-standard compliance expectations.

Key Responsibilities

• Establish and improve the company’s IT security framework, policies, procedures, controls, and evidence system in alignment with recognized standards such as ISO/IEC 27001, NIST Cybersecurity Framework, CIS Controls, and SOC 2 practices.
• Prepare for and support Tier-1 customer IT security audits, including questionnaires, evidence collection, gap analysis, remediation plans, and executive-level audit reporting.
• Protect sensitive semiconductor design data, customer confidential information, engineering systems, source repositories, test data, and business-critical infrastructure.
• Implement and monitor controls for identity and access management, endpoint protection, network security, vulnerability management, backup and recovery, incident response, logging, and secure data sharing.
• Work with engineering, quality, operations, HR, legal, and external IT service providers to ensure security requirements are practical, enforceable, and consistently followed.

【Ideal Candidate】
The ideal candidate can translate Tier-1 customer security expectations and industry standards into a practical, auditable IT security environment that protects design IP, customer data, engineering workflows, and business operations.