Cybersecurity GRC Lead — Data Privacy & Compliance

XIAOMI TECHNOLOGIES SINGAPORE PTE. LTD.; Singapore; On-site; SGD 120,000 - 160,000; Full time

Job summary

Xiaomi Technologies Singapore is seeking an experienced Information Security Compliance Lead to manage data security, privacy, and governance across the data lifecycle. You will lead risk assessments, ensure security by design, and coordinate with cross-functional teams globally to maintain compliant security practices.

The role requires strong knowledge of GDPR, PDPA, ISO 27001/27701, and practical GRC experience, with Mandarin and English proficiency for regional collaboration.

Qualifications

• Minimum 2 years hands-on information security experience focusing on data security, compliance, risk, and governance.
• Proven ability to work across multicultural, cross-functional teams.
• Strong understanding of data security principles and privacy regulations (GDPR, PDPA).

Responsibilities

• Lead compliance initiatives by tracking, implementing, and validating controls across security and privacy frameworks.
• Serve as the primary compliance expert on data security projects, ensuring security by design.
• Collaborate with engineering, product, legal, and DevOps teams to deploy compliant technical solutions.
• Develop and maintain information security policies, standards, and procedures.
• Lead risk assessments against ISO 27001/27701, GDPR, SOC2, PCI DSS, and related standards.
• Oversee remediation activities and regional security operations.
• Provide governance on security architecture for new and existing tech solutions.

Skills

CISSP

CISA

GRC

Risk management

Security governance

Project management

Mandarin

English proficiency

Education

Bachelor's degree in Computer Science or related field

Equivalent practical experience

Tools

ISO 27001 Lead Auditor

Job description

Xiaomi Technologies Singapore is seeking an experienced Information Security Compliance Lead to manage data security, privacy, and governance across the data lifecycle. You will lead risk assessments, ensure security by design, and coordinate with cross-functional teams globally to maintain compliant security practices.

The role requires strong knowledge of GDPR, PDPA, ISO 27001/27701, and practical GRC experience, with Mandarin and English proficiency for regional collaboration.