Data Security Program Manager - Global Payment

ByteDance; Singapore; On-site; SGD 80,000 - 120,000; Full time

Job summary

A leading company is seeking a Data Security Program Manager for its Global Payments team in Singapore. This role involves managing security certifications, enhancing data control frameworks, and ensuring compliance with privacy regulations. The ideal candidate will have a strong background in data privacy and security, excellent project management skills, and fluency in English.

Qualifications

• Strong background in data privacy and security.
• Fluent in English.

Responsibilities

• Lead projects to obtain security certifications like PCI DSS and ISO27001.
• Manage data control framework and compliance with regulations.
• Evaluate and remediate data security incidents.

Skills

Data Privacy

Project Management

Cross-Functional Collaboration

Security Compliance

Job description

Data Security Program Manager - Global Payment

Singapore | Regular | Product | Job ID: A237182B

Responsibilities

1. Team Introduction: In line with the company's globalization strategy, the Global Payments team develops a platform for cross-border payment solutions supporting ByteDance's rapidly growing products and services worldwide.
2. Security Certifications: Lead cross-functional projects to obtain security certificates such as PCI DSS and ISO27001, ensuring compliance with industry standards. Manage re-assessments, renewals, and audits, maintaining relationships with auditors.
3. Data Control Framework: Collaborate with teams to strengthen PIPO's data control framework (PCF), supporting TikTok's enhancements and regulatory compliance. This includes data taxonomy, retention, sharing, processing, purpose limitation, rights, privacy policies, and awareness. Assess requests and align PCF requirements between PIPO and TikTok.
4. Incident Management: Discover, evaluate, report, and remediate privacy and data security incidents, adhering to SOPs and SLAs aligned with regulators and stakeholders.
5. Security Testing: Participate in security penetration testing, coordinate remediation, and manage cross-functional projects with Infra and GSO teams if needed.
6. Compliance: Ensure PIPO's compliance with USDS and EU Clover data policies. Support system modifications for new requirements and build partnerships with USDS Risk and Compliance teams.
7. Support for New Entities: Assist in establishing new entities, licensing, and security assessments related to acquisitions, ensuring timely milestone completion.

Qualifications

1. Minimum Qualifications: Strong background in data privacy and security, understanding of privacy frameworks, vulnerabilities, and remediation. Excellent cross-functional collaboration and project management skills. Fluent in English.
2. Preferred Qualifications: Over 5 years of experience in IT infrastructure, architecture, data security, and privacy, especially in multi-national, multi-tenancy, distributed systems. Experience in financial services, IT audit, or consulting is a plus.