Senior Data Security & Compliance Engineer (ISO/GDPR)

Xiaomi Technology; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Xiaomi Technology is seeking a Senior Information Security Compliance Engineer to drive our data security and privacy initiatives. You will track, implement, and validate controls across major frameworks while protecting sensitive data throughout its lifecycle.

You will collaborate with engineering, product, legal, and DevOps teams to embed security by design, lead risk assessments across standards, and manage international security operations and incident response to align with local needs in a

Qualifications

• Bachelor's degree or higher in Computer Science, Information Systems, Cybersecurity, or a related field.
• 4+ years in information security with 2+ years in data security, compliance, risk and governance (GRC).
• Deep understanding of data security concepts and international privacy regulations (GDPR, PDPA).
• Strong multitasking abilities and ability to work under pressure with tight deadlines.
• Excellent Mandarin and English communication, both written and verbal.
• Certifications such as CISSP, CISA, PMP, CIPM, ISO 27XXX Lead Auditor preferred.

Responsibilities

• Serve as the primary compliance SME on data security, cross-border data transfer compliance and personal data protection.
• Collaborate with engineering, product, legal, and DevOps to guide implementation of compliant solutions.
• Lead internal risk assessments across ISO/IEC 27001/27701, GDPR, SOC2, PCI DSS and related standards.
• Manage international security operations, incident response, and regional liaison to adapt global strategies locally.

Skills

Data security

GRC

Cross-border compliance

Mandarin & English

Project management

Education

Bachelor's degree or higher in CS/IS/Cybersecurity

Job description

Xiaomi Technology is seeking a Senior Information Security Compliance Engineer to drive our data security and privacy initiatives. You will track, implement, and validate controls across major frameworks while protecting sensitive data throughout its lifecycle.

You will collaborate with engineering, product, legal, and DevOps teams to embed security by design, lead risk assessments across standards, and manage international security operations and incident response to align with local needs in a