Security Compliance Engineer

ByteDance; Singapore; On-site; SGD 80,000 - 100,000; Full time

Job summary

ByteDance is seeking a professional to join its Security Governance and Compliance team. The role involves ensuring compliance with security regulations, managing cybersecurity frameworks, and applying for security certifications such as ISO 27001 and SOC 2.

The ideal candidate will have over 3 years of relevant experience and possess strong communication skills. This position offers opportunities for continuous learning and engagement in a collaborative environment.

Qualifications

• More than 3 years of experience in managing ISO 27001, SOC 2 audit, and compliance programs.
• Extensive knowledge of cybersecurity frameworks and regulatory requirements.
• Excellent communication skills and a collaborative mindset.

Responsibilities

• Stay updated on laws and information security standards.
• Apply for security certifications like ISO 27001 and SOC.
• Oversee compliance and address non‑compliant items.
• Validate organization's security controls.
• Monitor compliance with external certifications.

Skills

ISO 27001 management

SOC 2 compliance

PCI-DSS knowledge

Communication skills

Logical reasoning

Education

Relevant industry certifications (CISM, CISA, CISSP)

Job description

About the Team

As a part of ByteDance's Security Department, the Security Governance and Compliance team plays a pivotal role in supporting various business lines. This involves offering expertise in security governance and compliance by implementing robust information security management systems. The team is dedicated to tailoring solutions that address key aspects such as data security, privacy protection, and regulatory compliance. Moreover, they actively pursue and obtain a multitude of security compliance qualifications and certifications essential for the diverse business lines. Additionally, the team actively engages in shaping industry standards for security and privacy, while also conducting advanced research to anticipate and navigate future risks and opportunities.

Responsibilities

• Stay abreast of the latest developments of laws, regulations, policies and information security standards related to Network Security, Data Security and Data protection. Ensure timely updates and maintenance of the internal information security management system.
• Apply for information security certifications such as ISO 27001, SOC and PCI for our products.
• Advocate for and oversee the implementation of security compliance and privacy protection requirements, promptly addressing and rectifying any non‑compliant items.
• Validate and verify that the organization's security controls meet industry requirements. Conduct thorough examinations of processes, systems, policies, procedures, network diagrams, and system configurations.
• Monitor business activities through collaborating with cross‑functional team leaders to guarantee ongoing compliance with external certifications.

Minimum Qualifications

• More than 3 years of relevant experience in managing ISO 27001:2022, SOC 2 audit, and compliance programs within a global organizational setting.
• Demonstrate extensive knowledge and hands‑on experience with cybersecurity frameworks such as ISO 27001, PCI‑DSS, SOC 2, and other relevant regulatory requirements.
• Exhibit excellent communication skills and logical reasoning abilities.
• Robust commitment to continuous learning and a collaborative, team‑oriented mindset.

Preferred Qualifications

• Experience in ISO management systems, SOC audit, and PCI certification.
• Relevant industry certifications such as CISM, CISA, CISSP.