Senior Security Compliance Engineer — ISO/SOC/PCI Expert

ByteDance; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

ByteDance's Security Governance and Compliance team leads in implementing robust information security management systems, focusing on data security, privacy protection, and regulatory compliance across business lines. The team pursues certifications and shapes industry standards while conducting advanced risk research.

The role involves staying abreast of laws and standards, obtaining ISO 27001, SOC, and PCI certifications, and ensuring compliant security controls, with collaboration across

Qualifications

• More than 3 years of hands-on experience managing ISO 27001:2022, SOC 2 audits, and compliance programs in a global setting.
• Extensive knowledge of cybersecurity frameworks including ISO 27001, PCI-DSS, SOC 2 and other regulatory requirements.
• Excellent communication and logical reasoning abilities.
• Strong commitment to continuous learning and collaboration.

Responsibilities

• Stay updated on laws, regulations, policies and information security standards related to Network Security, Data Security and Data protection.
• Apply for information security certifications such as ISO 27001, SOC and PCI for products.
• Advocate for and oversee security compliance and privacy protection requirements; address non-compliant items.
• Validate that security controls meet industry requirements by examining processes, systems, policies and configurations.
• Monitor activities across cross-functional teams to ensure ongoing compliance with external certifications.

Skills

ISO 27001 knowledge

SOC 2 audit

PCI-DSS knowledge

Regulatory compliance

Job description

ByteDance's Security Governance and Compliance team leads in implementing robust information security management systems, focusing on data security, privacy protection, and regulatory compliance across business lines. The team pursues certifications and shapes industry standards while conducting advanced risk research.

The role involves staying abreast of laws and standards, obtaining ISO 27001, SOC, and PCI certifications, and ensuring compliant security controls, with collaboration across