Cybersecurity Engineer (Governance, Risk & Compliance)

Responsibilities • Lead compliance initiatives by tracking, implementing, and validating controls aligned with security and privacy frameworks to protect sensitive data throughout its lifecycle • Serve as the primary compliance expert on projects involving data security, cross-border data transfer compliance, and personal data protection, ensuring security requirements are integrated by design • Collaborate with engineering, product, legal, and DevOps teams to guide the development and deployment of compliant technical solutions across the data lifecycle • Develop, maintain, and enhance information security policies, standards, procedures, and guidelines to uphold compliance and security best practices • Lead and conduct internal risk assessments across frameworks such as ISO/IEC 27001/27701, GDPR, SOC2, PCI DSS, and other relevant standards to identify and mitigate risks • Manage the full lifecycle of cybersecurity risk remediation activities, ensuring timely mitigation of identified risks • Oversee international security operations, incident response, and regional coordination to tailor global security strategies to local requirements • Provide governance and oversight on security architecture for new and existing technology solutions to ensure compliance and risk mitigation Preferred competencies and qualifications • Professional certifications such as CISSP, CISA, PMP, CIPM, ISO 27XXX Lead Auditor, or equivalent credentials • Bachelor’s degree or higher in Computer Science, Information Systems, Cybersecurity, or related field, or equivalent practical experience • Minimum 2 years of hands-on experience in information security, with at least 2 years focused on data security, compliance, risk, and governance (GRC) • Strong understanding of data security principles including encryption, tokenization, data masking, and access controls, as well as international data privacy regulations such as GDPR and PDPA • Proven project management and organizational skills with experience collaborating effectively within multicultural and cross-functional teams • Ability to manage multiple priorities effectively in a fast-paced environment under tight deadlines • Proficiency in Mandarin to support coordination and collaboration with Mandarin-speaking stakeholders and regional teams • Proficiency in English for effective communication and collaboration across teams