Security & Privacy Compliance Senior Manager -Munich/ Frankfurt

Alibaba Cloud; München; Vor Ort; EUR 120.000 - 160.000; Vollzeit

Zusammenfassung

Alibaba Cloud in Munich seeks a senior leader to establish and maintain the regional security and privacy compliance framework, conduct risk assessments, and drive remediation for new markets while monitoring EU cybersecurity and data protection developments.

You will interface with regulators, support audits, expand certifications, advise enterprise customers on compliance, and lead assessments against standards such as NIS2, GDPR, and ISO 27001.

Qualifikationen

• Bachelor's degree or equivalent practical experience in information security, computer science or related field.
• 8+ years in security compliance, data compliance, technology risk or advisory with data protection knowledge.
• Experience interpreting regulations (GDPR, NIS2, CRA) and closing compliance gaps.
• Experience engaging regulators, auditors and enterprise customers; industry associations are a plus.
• Experience assessing AI-related compliance (data use, model training, cross-border flows).
• Experience obtaining/implementing security certifications for cloud (ISO 27001, NIST CSF, SOC 2).
• Fluency in English and Mandarin; ability to work with teams in China.

Aufgaben

• Establish and maintain the regional security and privacy compliance framework; conduct risk assessments and gap remediation for new markets.
• Monitor regulatory developments related to cyber security, data security and AI security in the EU.
• Interface with regulators, support regulatory audits and inquiries for the cloud platform.
• Maintain and expand security certifications required for market entry in Europe.
• Act as primary compliance contact for European enterprise customers; advise on vendor due diligence, contract security clauses, audits, and customer meetings.
• Lead independent assessments against industry standards and support cloud adoption for regulated sectors.

Kenntnisse

Security compliance

Data compliance

Regulatory advisory

Risk assessment

Regulator engagement

AI compliance

Security certifications

English & Mandarin

Cross-border data transfer

Ausbildung

Bachelor's degree in information security, computer science or related field

Jobbeschreibung

• Establish and maintain the security and privacy compliance framework for the region: conduct risk assessment and drive gap remediation for newly launched markets, and monitor regulatory developments related to cyber security, data security and AI security (e.g. the EU Cybersecurity Act, EUCS and the Cloud and AI Development Act).
• Serve as the cloud platform's interface with local regulators, supporting regulatory audits and security inspections as well as inquiries from the regulators.
• Maintain and expand the security certifications required for market entry in Europe, prioritising new certifications based on commercial value and urgency.
• Act as the primary contact for European enterprise customer requests related to security compliance and privacy, delivering compliance support that covers vendor due diligence, contract security clause review, audit requests and customer meetings, maintaining customer-facing compliance materials, and developing compliance solutions based on customers' requirements.
• Lead independent assessments with reference to the industry standards and guidelines of regulated sectors, e.g. financial services, public sector, and support key customers through cloud adoption.
• Assess data compliance risks in AI scenarios (e.g. data use, model training and cross-border transfer) and develop AI compliance materials.

Job Requirements

• Bachelor's degree in information security, computer science or a related field, or equivalent practical experience.
• 8+ years of experience in security compliance, data compliance, technology risk or compliance advisory, with working knowledge of data protection legislation and cross-border data transfer requirements; experience gained in a Big 4 firm or a consulting practice covering technology risk or data compliance is preferred.
• Experience interpreting legal and regulatory requirements, assessing risks, and driving the remediation of identified gaps through to closure, with working knowledge of the regulations shaping the European market (e.g. NIS2, the CRA and GDPR).
• Experience engaging regulators, auditors and enterprise customers directly as the accountable compliance representative; active involvement in industry associations or standards bodies, such as CSA, IAPP, ISACA or the EU Cloud Code of Conduct, is a plus.
• Experience assessing compliance risk in AI scenarios, covering data use, model training and cross-border data flows, and translating the findings into actionable guidance for product and business teams.
• Experience obtaining or implementing recognised security certifications and frameworks for cloud services, such as ISO 27001, NIST CSF and SOC 2.
• Professional fluency in English and Mandarin, both written and spoken, with the ability to work with teams in China.
• Experience managing multiple workstreams and setting priorities in a fast-moving, multi-market environment.