Senior Information Security Compliance Engineer

Xiaomi Technology; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Xiaomi Technology is seeking a Senior Information Security Compliance Engineer to drive our data security and privacy initiatives. You will track, implement, and validate controls across major frameworks while protecting sensitive data throughout its lifecycle.

You will collaborate with engineering, product, legal, and DevOps teams to embed security by design, lead risk assessments across standards, and manage international security operations and incident response to align with local needs in a

Qualifications

• Bachelor's degree or higher in Computer Science, Information Systems, Cybersecurity, or a related field.
• 4+ years in information security with 2+ years in data security, compliance, risk and governance (GRC).
• Deep understanding of data security concepts and international privacy regulations (GDPR, PDPA).
• Strong multitasking abilities and ability to work under pressure with tight deadlines.
• Excellent Mandarin and English communication, both written and verbal.
• Certifications such as CISSP, CISA, PMP, CIPM, ISO 27XXX Lead Auditor preferred.

Responsibilities

• Serve as the primary compliance SME on data security, cross-border data transfer compliance and personal data protection.
• Collaborate with engineering, product, legal, and DevOps to guide implementation of compliant solutions.
• Lead internal risk assessments across ISO/IEC 27001/27701, GDPR, SOC2, PCI DSS and related standards.
• Manage international security operations, incident response, and regional liaison to adapt global strategies locally.

Skills

Data security

GRC

Cross-border compliance

Mandarin & English

Project management

Education

Bachelor's degree or higher in CS/IS/Cybersecurity

Job description

We are seeking a highly skilled and motivated Senior Information Security Compliance Engineer to join our dynamic team. In this pivotal role, you will be the cornerstone of our compliance and data security initiatives. You will be responsible for tracking, implementing, and validating controls against leading security and privacy protection frameworks, with a specific emphasis on protecting sensitive data throughout its lifecycle.

Responsibilities

• Serve as the primary compliance subject matter expert on critical projects (e.g., data security, cross-border data transfer compliance, personal data protection), ensuring security and data protection requirements are embedded by design.
• Collaborate closely with engineering, product, legal, and DevOps teams to guide the implementation of compliant technical solutions throughout the entire data lifecycle.
• Lead and perform internal risk assessments across multiple frameworks, including ISO/IEC 27001/27701, GDPR, SOC2, PCI DSS and other relevant standards.
• Manage international security operations, incident response, and regional liaison to adapt global strategies to local needs.

Qualifications

• A Bachelor's degree or higher in Computer Science, Information Systems, Cybersecurity, or a related field. Equivalent practical experience will be considered.
• 4+ years of hands‑on experience in information security, with at least 2 years focused specifically on data security, compliance, risk, and governance (GRC) is a strong plus.
• Deep understanding of data security principles (e.g., encryption, tokenization, data masking, access controls) and international data privacy regulations (GDPR, PDPA, etc.).
• Thrive in a fast‑paced, dynamic environment and can effectively manage multiple priorities under pressure and tight deadlines.
• Exceptional verbal and written communication skills in both Mandarin and English are required.
• Excellent project management and organizational skills, with a proven ability to collaborate effectively within multicultural and multi‑functional teams.
• Professional certifications such as CISSP, CISA, PMP, CIPM, ISO 27XXX Lead Auditor, or other equivalent credentials are highly desirable.