Cybersecurity Engineer (Governance, Risk & Compliance) (A237583)

Xiaomi Technology; Singapore; Presencial; SGD 120.000 - 180.000; Jornada completa

Descripción de la vacante

Xiaomi Technology in Singapore seeks a senior security and compliance lead to embed data protection by design across projects. The role collaborates with engineering, product, legal, and DevOps to implement compliant tech solutions throughout the data lifecycle.

You will develop security policies, run risk assessments across ISO/IEC, GDPR, SOC2, and PCI DSS, and oversee remediation and incident response while coordinating with global and regional teams. Fluent Mandarin/English is essential.

Formación

• Bachelor's degree or higher in Computer Science, Information Systems, Cybersecurity, or a related field.

Responsabilidades

• Serve as the primary compliance subject matter expert on critical projects (e.g., data security, cross-border data transfer compliance, personal data protection), ensuring security and data protection requirements are embedded by design.
• Collaborate with engineering, product, legal, and DevOps teams to guide compliant technical solutions across the data lifecycle.
• Develop, maintain, and improve information security policies, standards, procedures, and guidelines.
• Lead and perform internal risk assessments across ISO/IEC 27001/27701, GDPR, SOC2, PCI DSS and other standards.
• Lead end-to-end lifecycle of cybersecurity risk remediation activities with timely mitigation.
• Manage international security operations, incident response, and regional liaison to adapt global strategies locally.
• Provide security architecture governance and oversight for new and existing technology solutions.

Conocimientos

Security governance

Risk assessment

Incident response

Stakeholder management

Mandarin & English

Project management

Data security principles

Educación

Bachelor's degree or higher in Computer Science/IS/Cybersecurity

Descripción del empleo

• - Serve as the primary compliance subject matter expert on critical projects (e.g., data security, cross-border data transfer compliance, personal data protection), ensuring security and data protection requirements are embedded by design.
• - Collaborate closely with engineering, product, legal, and DevOps teams to guide the implementation of compliant technical solutions throughout the entire data lifecycle.
• - Develop, maintain, and improve information security policies, standards, procedures, and guidelines.
• - Lead and perform internal risk assessments across multiple frameworks, including ISO/IEC 27001/27701, GDPR, SOC2, PCI DSS and other relevant standards.
• - Lead the end-to-end lifecycle of cybersecurity risk remediation activities, ensuring identified risks are effectively mitigated within agreed timelines.
• - Manage international security operations, incident response, and regional liaison to adapt global strategies to local needs.
• - Provide security architecture governance and oversight for new and existing technology solutions.
• - A Bachelor's degree or higher in Computer Science, Information Systems, Cybersecurity, or a related field. Equivalent practical experience will be considered.
• - Good understanding of data security principles (e.g., encryption, tokenization, data masking, access controls) and international data privacy regulations (GDPR, PDPA, etc.).
• - Thrive in a fast-paced, dynamic environment and can effectively manage multiple priorities under pressure and tight deadlines.
• - Exceptional ability to communicate in Mandarin and English, in order to support coordination and collaboration with Mandarin-speaking stakeholders, teams, and business partners across regional markets.
• - Excellent project management and organizational skills, with a proven ability to collaborate effectively within multicultural and multi-functional teams.
• - Professional certifications such as CISSP, CISA, PMP, CIPM, ISO 27XXX Lead Auditor, or other equivalent credentials are highly desirable.