Description

You will lead the development and implementation of enterprise policies, standards, and frameworks for governance, risk, and compliance.

Responsibilities

• Drive IT and Information Security compliance programs to ensure alignment with regulatory requirements and industry best practices.
• Manage relationships with key stakeholders and external auditors to oversee documentation, scoping, testing, and remediation of security controls.
• Validate key controls periodically to provide early warning to management for timely remediation.
• Assess audit findings and control weaknesses to assist in the development of management action plans.
• Provide control consulting to assist owners in redesigning and automating the control environment.
• Oversee the reporting of tech risk management, compliance documentation, and IT governance.
• Lead a virtual data cross-border working group to respond to business area requests.

Required Skills

• 5+ years of experience in IT, Technology, or Information Security Internal Audit or consultancy.
• Deep expertise in international standards and Chinese regulations, including CSL, DSL, MLPCS, CBDT, and UPI-DSS.
• Proficiency in Information Security and Security Compliance.
• Experience with Internal Audits and managing complex audit cycles.
• Mandarin language proficiency.
• Bachelor’s degree in Computer Science or Engineering.
• Proven ability to influence stakeholders and communicate results across all levels of an organization.
• Ability to manage multiple complex projects and drive issues to completion.

Key Skills

Education

Bachelor’s degree in computer science, Engineering