Description

Lead enterprise governance, risk, and compliance (GRC) initiatives for IT and information security, owning the full audit lifecycle from scoping to remediation.

This role is on-site.

Responsibilities

• Develop and implement enterprise policies, standards, and frameworks for governance and compliance.
• Manage relationships with internal stakeholders and external auditors to oversee security control documentation and testing.
• Validate key controls periodically to provide early warning for timely remediation of weaknesses.
• Assess audit findings to assist in developing management action plans and provide consulting on control redesign.
• Oversee tech risk management reporting and lead a virtual cross-border working group for business requests.

Required Skills

• 5+ years of experience in IT, Technology, or Information Security Internal Audit or consultancy.
• Deep expertise in international standards and Chinese regulations, including CSL, DSL, MLPCS, CBDT, and UPI-DSS.
• Proficiency in Information Security and Security Compliance frameworks.
• Experience managing complex internal audit cycles and driving issues to completion.
• Fluency in Mandarin is required.
• Bachelor’s degree in Computer Science or Engineering.
• Proven ability to influence stakeholders and communicate results across all organizational levels.

Preferred Skills

• Experience with control automation and redesigning control environments.

Key Skills

Education

Bachelor’s degree in computer science, Engineering