GRC Cybersecurity Engineer — Data Privacy & Compliance

XIAOMI TECHNOLOGIES SINGAPORE PTE. LTD.; Singapore; Presencial; SGD 110.000 - 170.000; Jornada completa

Descripción de la vacante

Xiaomi Technologies Singapore Pte. Ltd. is seeking a seasoned Compliance Lead to drive information security governance and risk management across its data lifecycle.

You'll lead adherence to ISO 27001/27701, GDPR, SOC2, PCI DSS, and related standards while coordinating with engineering, product, and legal teams. The role requires strong project management, cross-cultural collaboration, and fluency in Mandarin and English to engage regional stakeholders and ensure security by design in global

Formación

• Bachelor’s degree or higher in Computer Science, Information Systems, Cybersecurity, or related field, or equivalent practical experience.
• Minimum 2 years of hands-on information security experience with at least 2 years in data security, compliance, risk, and governance (GRC).
• Strong understanding of data security principles including encryption, tokenization, data masking, and access controls.
• Familiarity with international data privacy regulations such as GDPR and PDPA.
• Proven project management and organizational skills with cross-functional collaboration.
• Ability to manage multiple priorities in a fast-paced environment with tight deadlines.
• Proficiency in Mandarin and English for coordination with regional teams and stakeholders.

Responsabilidades

• Lead compliance initiatives by tracking, implementing, and validating controls aligned with security and privacy frameworks.
• Serve as the primary compliance expert on projects involving data security, cross-border data transfer compliance, and personal data protection.
• Collaborate with engineering, product, legal, and DevOps teams to guide compliant technical solutions across the data lifecycle.
• Develop, maintain, and enhance information security policies, standards, procedures, and guidelines.
• Lead internal risk assessments across ISO 27001/27701, GDPR, SOC2, PCI DSS, and other standards.
• Manage the full lifecycle of cybersecurity risk remediation activities, ensuring timely mitigation of identified risks.
• Oversee international security operations, incident response, and regional coordination for global strategies at local levels.
• Provide governance and oversight on security architecture for new and existing technology solutions.

Conocimientos

Data security

GRC

Project management

Multicultural collaboration

Mandarin proficiency

English proficiency

Risk assessment

Educación

Bachelor’s degree in CS/IS/Cybersecurity

Descripción del empleo

Xiaomi Technologies Singapore Pte. Ltd. is seeking a seasoned Compliance Lead to drive information security governance and risk management across its data lifecycle.

You'll lead adherence to ISO 27001/27701, GDPR, SOC2, PCI DSS, and related standards while coordinating with engineering, product, and legal teams. The role requires strong project management, cross-cultural collaboration, and fluency in Mandarin and English to engage regional stakeholders and ensure security by design in global