Cybersecurity Engineer (Governance, Risk & Compliance) (A233302)

Xiaomi Technology; Singapore; On-site; SGD 150,000 - 190,000; Full time

Job summary

Xiaomi Technology Singapore is seeking a Senior Information Security Compliance Engineer to drive data security compliance across the data lifecycle. You will collaborate with engineering, product, legal and DevOps to embed security by design and guide compliant technical solutions.

Lead internal risk assessments against ISO/IEC 27001/27701, GDPR, SOC2, PCI DSS and manage international security operations. Fluent in Mandarin and English, you will thrive in a fast-paced environment and coordinate

Qualifications

• Bachelor’s degree or higher in CS/IS/Cybersecurity or related field.
• 4+ years in information security, with at least 2 years in data security, compliance, risk & governance (GRC).
• Deep understanding of data security principles (encryption, tokenization, masking, access controls) and privacy regulations (GDPR, PDPA).
• Able to manage multiple priorities under pressure and tight deadlines.
• Excellent verbal and written communication in Mandarin and English.
• Strong PM and organizational skills with cross-functional collaboration.
• Certifications such as CISSP, CISA, PMP, CIPM, ISO 27xxx Lead Auditor are desirable.

Responsibilities

• Serve as the primary compliance subject matter expert on key projects (data security, cross-border data transfer, PDPA).
• Collaborate with engineering, product, legal and DevOps to embed compliant technical solutions across the data lifecycle.
• Lead internal risk assessments across ISO/IEC 27001/27701, GDPR, SOC2, PCI DSS and other standards.
• Manage international security operations, incident response, and regional liaison to adapt global strategies locally.

Skills

Information security

Data security

GRC/Risk assessment

Communication skills

Project management

Multicultural teamwork

Bilingual: Mandarin/English

Education

Bachelor’s degree in CS/IS/Cybersecurity

Tools

CISSP

CISA

PMP

CIPM

ISO 27001 Lead Auditor

Job description

We are seeking a highly skilled and motivated Senior Information Security Compliance Engineer to join our dynamic team. In this pivotal role, you will be the cornerstone of our compliance and data security initiatives. You will be responsible for tracking, implementing, and validating controls against leading security and privacy protection frameworks, with a specific emphasis on protecting sensitive data throughout its lifecycle.

1. Serve as the primary compliance subject matter expert on critical projects (e.g., data security, cross-border data transfer compliance, personal data protection), ensuring security and data protection requirements are embedded by design.

2. Collaborate closely with engineering, product, legal, and DevOps teams to guide the implementation of compliant technical solutions throughout the entire data lifecycle.

3. Lead and perform internal risk assessments across multiple frameworks, including ISO/IEC 27001/27701, GDPR, SOC2, PCI DSS and other relevant standards.

4. Manage international security operations, incident response, and regional liaison to adapt global strategies to local needs.

1. A Bachelor's degree or higher in Computer Science, Information Systems, Cybersecurity, or a related field. Equivalent practical experience will be considered.

2. 4+ years of hands-on experience in information security, with at least 2 years focused specifically on data security, compliance, risk, and governance (GRC) is a strong plus.

3. Deep understanding of data security principles (e.g., encryption, tokenization, data masking, access controls) and internatioanl data privacy regulations (GDPR, PDPA, etc.).

4. Thrive in a fast-paced, dynamic environment and can effectively manage multiple priorities under pressure and tight deadlines.

5. Exceptional verbal and written communication skills in both Mandarin and English are required.

6. Excellent project management and organizational skills, with a proven ability to collaborate effectively within multicultural and multi-functional teams.

7. Professional certifications such as CISSP, CISA, PMP, CIPM, ISO 27XXX Lead Auditor, or other equivalent credentials are highly desirable.