Security Compliance Engineer: ISO 27001, SOC 2 & PCI Expert

ByteDance; Singapore; On-site; SGD 110,000 - 150,000; Full time

Job summary

ByteDance's Security Governance and Compliance team in Singapore is seeking a seasoned professional to lead governance and compliance programs across multiple product lines.

You will manage ISO 27001:2022, SOC 2, PCI-DSS efforts, oversee privacy protection, and collaborate with cross-functional teams to ensure ongoing certifications.

The role requires 3+ years of relevant experience, strong communication, and a proactive attitude toward learning in a fast-paced tech environment.

Qualifications

• 3+ years managing ISO 27001, SOC 2 audits, and compliance programs in global orgs.
• Deep knowledge of ISO 27001, PCI-DSS, SOC 2 and other regulatory requirements.
• Excellent communication and logical reasoning.
• Strong learning mindset and team collaboration.

Responsibilities

• Stay abreast of laws and information security standards related to Network Security, Data Security and Data protection.
• Apply for information security certifications such as ISO 27001, SOC and PCI for our products.
• Advocate for and oversee security compliance and privacy protection requirements.
• Validate that security controls meet industry requirements; review processes, systems, and configurations.
• Monitor activities with cross-functional leaders to maintain external certifications.

Skills

ISO 27001

SOC 2

PCI-DSS

Regulatory compliance

Education

CISM

CISA

CISSP

Job description

ByteDance's Security Governance and Compliance team in Singapore is seeking a seasoned professional to lead governance and compliance programs across multiple product lines.

You will manage ISO 27001:2022, SOC 2, PCI-DSS efforts, oversee privacy protection, and collaborate with cross-functional teams to ensure ongoing certifications.

The role requires 3+ years of relevant experience, strong communication, and a proactive attitude toward learning in a fast-paced tech environment.