GRC Cybersecurity Engineer: Data Privacy & Compliance

XIAOMI TECHNOLOGIES SINGAPORE PTE. LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Xiaomi Technologies Singapore Pte. Ltd. is seeking a seasoned Information Security and Privacy Compliance Lead to drive global data protection programs locally.

You will work with engineering, product, legal, and DevOps teams to embed security by design in new and existing solutions across the data lifecycle. You will lead risk assessments against ISO 27001/27701, GDPR, SOC 2, and PCI DSS, govern security architecture, and oversee international operations to align with local requirements.

Qualifications

• Bachelor’s degree or higher in Computer Science, Information Systems, Cybersecurity, or a related field.
• CISSP, CISA, PMP, CIPM, ISO 27XXX Lead Auditor or equivalent certifications.
• Minimum 2 years of hands-on information security, with focus on data security, compliance, risk and governance.
• Strong understanding of encryption, tokenization, data masking, and access controls.
• Familiarity with GDPR and PDPA regulations and international data privacy rules.
• Proven project management and cross-functional collaboration skills.
• Ability to manage multiple priorities in a fast-paced environment.

Responsibilities

• Lead compliance initiatives by tracking, implementing, and validating controls aligned with security and privacy frameworks.
• Serve as the primary compliance expert on data security and cross-border transfer projects.
• Collaborate with engineering, product, legal, and DevOps to guide compliant solutions across the data lifecycle.
• Develop and maintain information security policies, standards, and guidelines.
• Lead internal risk assessments against ISO 27001/27701, GDPR, SOC2, PCI DSS, and others.
• Manage the full lifecycle of cybersecurity risk remediation activities.
• Oversee international security operations, incident response, and regional coordination.
• Provide governance on security architecture for new and existing technology solutions.

Skills

Data security principles

Encryption & tokenization

Data masking

Access controls

GRC experience

Project management

Multicultural teamwork

Mandarin fluency

English fluency

Education

Bachelor’s degree or higher in Computer Science, Information Systems, Cybersecurity, or related field

CISSP

CISA

PMP

CIPM

ISO 27XXX Lead Auditor

Job description

Xiaomi Technologies Singapore Pte. Ltd. is seeking a seasoned Information Security and Privacy Compliance Lead to drive global data protection programs locally.

You will work with engineering, product, legal, and DevOps teams to embed security by design in new and existing solutions across the data lifecycle. You will lead risk assessments against ISO 27001/27701, GDPR, SOC 2, and PCI DSS, govern security architecture, and oversee international operations to align with local requirements.