2027 Fresh Grad Hire - Security Compliance Engineer

Futu Holdings Limited; Hong Kong; On-site; HKD 96,000 - 144,000; Full time

Job summary

Futu Holdings Limited in Hong Kong is seeking an intern to assist with overseas security management, contributing to ISO 27001/27017/27018 and SOC 2 frameworks. You will study GDPR/CPRA/Hong Kong PDPO and support compliance gap analyses and remediation tracking.

You will participate in risk assessments and audits, help prepare materials for external reviews, and assist in delivering training while updating the compliance knowledge base for overseas operations.

Qualifications

• Interest in international security management and data compliance.
• Familiarity with ISO 27001, SOC 2, and PCI DSS preferred.
• Hands-on experience not required; eagerness to learn and contribute.

Responsibilities

• Assist in maintaining and improving overseas security management systems.
• Study overseas data protection regulations and conduct compliance gap analyses.
• Participate in security assessments, audits, and remediation tracking.
• Deliver security compliance training and support knowledge base updates.

Skills

Security frameworks

Data compliance

ISO 27001

SOC 2

PCI DSS awareness

Education

Internship experience

Job description

• Assist in maintaining and continuously improving the company's overseas business security management system, and participate in the day-to-day operation of international security management frameworks such as ISO 27001/27017/27018 and SOC 2
• Track and study overseas cybersecurity and data protection regulations (e.g., GDPR, CCPA/CPRA, Hong Kong PDPO, Singapore PDPA), and assist in conducting compliance gap analyses and follow-up on remediation
• Participate in security compliance assessments, risk assessments, and internal audits for overseas business; assist in organizing compliance self-inspections and preparing materials for external audits; compile compliance reports and track issues through to remediation closure
• Assist in delivering security compliance awareness training and communication for overseas regions, and participate in maintaining the security compliance knowledge base and operational guidelines

Requirements

• Interest in learning about international security management frameworks and data compliance; familiarity with basic concepts such as ISO 27001, SOC 2, and PCI DSS is preferred (hands-on experience not required)
• Familiarity with or coursework in overseas data protection regulations; understanding of GDPR and basic personal information protection concepts is preferred; knowledge of regulatory compliance requirements in the overseas financial industry is a plus
• Solid foundational knowledge of information security, including basic concepts of network security, system security, and data security; ability to understand the mapping between technical controls and compliance requirements
• Good documentation writing skills, risk awareness, and problem analysis abilities; detail-oriented and responsible, with the ability to follow up on cross-team remediation items
• English & Chinese as working languages: fluent reading and writing; able to read English regulations and standards documents, and to conduct day-to-day email and meeting communication in English

Preferred Qualifications

• Internship experience in security, compliance, or legal fields
• Participation in CTF competitions, data compliance competitions, moot court, or business analysis competitions
• Strong English proficiency (e.g., CET-6, excellent IELTS/TOEFL scores, or overseas exchange experience)

*Open to candidates graduating between January 2026 and August 2027.