Cybersecurity Governance & Risk Lead (Global)

Xiaomi Technology; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Xiaomi Technology in Singapore seeks a senior security and compliance lead to embed data protection by design across projects. The role collaborates with engineering, product, legal, and DevOps to implement compliant tech solutions throughout the data lifecycle.

You will develop security policies, run risk assessments across ISO/IEC, GDPR, SOC2, and PCI DSS, and oversee remediation and incident response while coordinating with global and regional teams. Fluent Mandarin/English is essential.

Qualifications

• Bachelor's degree or higher in Computer Science, Information Systems, Cybersecurity, or a related field.

Responsibilities

• Serve as the primary compliance subject matter expert on critical projects (e.g., data security, cross-border data transfer compliance, personal data protection), ensuring security and data protection requirements are embedded by design.
• Collaborate with engineering, product, legal, and DevOps teams to guide compliant technical solutions across the data lifecycle.
• Develop, maintain, and improve information security policies, standards, procedures, and guidelines.
• Lead and perform internal risk assessments across ISO/IEC 27001/27701, GDPR, SOC2, PCI DSS and other standards.
• Lead end-to-end lifecycle of cybersecurity risk remediation activities with timely mitigation.
• Manage international security operations, incident response, and regional liaison to adapt global strategies locally.
• Provide security architecture governance and oversight for new and existing technology solutions.

Skills

Security governance

Risk assessment

Incident response

Stakeholder management

Mandarin & English

Project management

Data security principles

Education

Bachelor's degree or higher in Computer Science/IS/Cybersecurity

Job description

Xiaomi Technology in Singapore seeks a senior security and compliance lead to embed data protection by design across projects. The role collaborates with engineering, product, legal, and DevOps to implement compliant tech solutions throughout the data lifecycle.

You will develop security policies, run risk assessments across ISO/IEC, GDPR, SOC2, and PCI DSS, and oversee remediation and incident response while coordinating with global and regional teams. Fluent Mandarin/English is essential.