Cybersecurity Engineer (Governance, Risk & Compliance)

About the role

This Cybersecurity Engineer (Governance, Risk & Compliance) position acts as the primary compliance subject matter expert on critical projects such as data security, cross-border data transfer compliance and personal data protection. It works closely with engineering, product, legal and DevOps teams to embed security and data protection requirements by design, and covers international security operations, incident response and regional liaison.

Key responsibilities

• Serve as the main compliance subject matter expert on critical projects, embedding security and data protection requirements by design.
• Collaborate with engineering, product, legal and DevOps teams to guide compliant technical solutions across the data lifecycle.
• Develop, maintain and improve information security policies, standards, procedures and guidelines.
• Lead and perform internal risk assessments across ISO/IEC 27001/27701, GDPR, SOC2, PCI DSS and other standards.
• Lead the end-to-end lifecycle of cybersecurity risk remediation, ensuring risks are mitigated within agreed timelines.
• Manage international security operations, incident response and regional liaison to adapt global strategies to local needs.
• Provide security architecture governance and oversight for new and existing technology solutions.

Required profile

• Bachelor's degree or higher in Computer Science, Information Systems, Cybersecurity or a related field; equivalent practical experience will be considered.
• Ability to thrive in a fast-paced environment and manage multiple priorities under pressure and tight deadlines.
• Exceptional communication in Mandarin and English to coordinate with Mandarin-speaking stakeholders and partners across regional markets.
• Excellent project management and organisational skills, with a track record of working in multicultural, multi-functional teams.

Required skills

• Good understanding of data security principles (encryption, tokenization, data masking, access controls).
• Understanding of international data privacy regulations such as GDPR and PDPA.
• Professional certifications such as CISSP, CISA, PMP, CIPM, ISO 27XXX Lead Auditor or equivalent are highly desirable.