Data Compliance Specialist

ECARX TECHNOLOGY PTE. LTD.; Serangoon Garden Circus; On-site; SGD 60,000 - 90,000; Full time

Job summary

A leading tech firm in Singapore is seeking a Cyber Security Compliance Specialist. In this role, you will be responsible for managing the global data and privacy security operations, developing comprehensive data security plans, and conducting audits to ensure compliance with cybersecurity regulations. The ideal candidate will have a strong background in cyber security and data protection standards, along with excellent communication and collaboration skills across teams.

Qualifications

• At least 3 years in cyber security compliance or data security.
• Familiar with international compliance standards like GDPR and ISO27001.
• Good English communication and logical analysis skills.

Responsibilities

• Manage the enterprise's global data and privacy security operations.
• Develop data security plans according to DPO requirements.
• Conduct audits for data security compliance globally.

Skills

Cyber security compliance

Data security management

Risk management

Law related certifications

Network security regulations

Data encryption

Tools

ISO27001

GDPR

ISO21434

TISAX

Job description

Responsibilities

1. Responsible for the operation of the enterprise's global data and privacy security management system, including the formulation and optimization of detailed strategies, the implementation and promotion of data compliance policies in key areas, and other tasks;
2. Develop an overall data security plan according to the requirements of the DPO, and be responsible for risk management and closed-loop handling of data security on the enterprise side;
3. Responsible for conducting compliance operations regarding the implementation of regularized enterprise data security requirements, and responding to security matters and audits related to external supervision;
4. Responsible for conducting reviews/assessments of matters related to enterprise data security/personal information protection on the business side, including reviews related to data security/personal information protection throughout the information system lifecycle, such as Data Protection Impact Assessment (DPIA), Transfer Impact Assessment (TIA), Data Protection Impact Assessment (PIA), Data Protection Agreement (DPA), and capability assessment reviews related to ICTS (the US ICTS Rule, i.e., the Rule on Ensuring the Security of the Information and Communication Technology and Services Supply Chain);
5. Responsible for conducting internal audits of information security, data security, and privacy compliance at the company's global sites, coordinating with third-party audit or certification bodies introduced by the company, and assisting in completing audit work such as ISO 27001, ISO 27701, ISO 21434, TISAX, ESG, and ICTS equal-level protection;
6. Collaborate to complete the formulation of detailed rules for safety rewards and punishments, safety assessment plans, and the implementation of assessment work;
7. Responsible for regularly conducting special project training and publicity on enterprise-side data security to enhance personnel's security awareness and capabilities.

Requirements

1. At least 3 years of professional work experience in cyber security compliance, or 3 years in the data security field. Cyber security: Those with certifications such as CISSP, CISA, CISM, ISO27001LA, etc. will be given priority. Law: Those holding international certifications such as Exin-DPO, CIPP/E, CIPM, etc. will be preferred;
2. Familiar with or proficient in domestic and international network and data security management regulations, system standards, and compliance requirements, such as ICTS, ISO27001/27701, Information Security Level Protection, Cyber Security Law, GDPR, etc.;
3. Familiar with road vehicle cyber security management standards such as ISO21434 and TISAX, and understand the supplier requirements and CSMS certification requirements in Regulations R155 and R156.
4. Have a relatively comprehensive understanding of the knowledge system of cyber and data security, and be familiar with common cyber and data security technologies, products, and security solutions, such as work security, data encryption, data desensitization, firewalls, host security, and SDLC.
5. Familiar with data security management systems such as DSMM, and familiar with data full lifecycle management measures and data security technical protection measures.
6. Possess good written and oral English communication skills, as well as logical analysis capabilities, and be able to carry out positive and effective collaborative cooperation with both technical and non-technical teams.