Senior Data Security Engineer
You will assess and govern the company's current data security posture, taking charge of building out its data security system. You'll collaborate closely with legal, compliance, audit, and business teams to ensure data security policies align with regulatory requirements, and provide data security design and development support to R&D, product, and operations teams. You'll participate in and promote key management (KMS/HSM) and encryption policies, establishing a key rotation mechanism, and drive the construction of data security infrastructure such as DLP, database auditing, and key management. You'll also participate in emergency response efforts when data security breach incidents occur.
Responsibilities
- Sort out and govern the company's current data security status
- Take charge of the construction of the company's data security system
- Collaborate with legal, compliance, audit, and business teams to ensure data security policies align with regulatory requirements
- Provide data security design and development support to R&D, product, and operation teams
- Participate in and promote key management (KMS/HSM) and encryption policies, and establish a key rotation mechanism
- Drive the construction of data security infrastructure, such as DLP, database auditing, and key management
- Participate in the emergency response to data security breach incidents
Requirements
- At least 5 years of experience in information security or data security, including practical experience in data security or encryption technology projects
- In-depth mastery of data encryption, key management, DLP, data desensitization, database auditing, and access control mechanisms
- Proficiency in methodologies for data security system construction and governance
- Familiarity with international and domestic data security laws, regulations, and standards (e.g., GDPR, ISO 27001)
- Familiarity with the construction and implementation of data security capabilities on the AWS cloud platform
- Excellent cross-departmental communication skills and the ability to drive the implementation of data security initiatives