10 дней назад
Senior Consultant, Regional Information Security Office/Cyber Security Officer China
Вакансия из Hirify Global, списка международных tech-компанийДля мэтча и отклика нужен Plus
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Senior Consultant, Regional Information Security Office/Cyber Security Officer China (Cybersecurity/Compliance): Leading China cybersecurity certification, regulatory compliance, customer security engagement, and APAC technology and M&A security initiatives with an accent on ISO 27001, MLPS, data protection requirements, and regional stakeholder coordination. Focus on translating complex security requirements into business actions, managing audit and remediation evidence, supporting customer and commercial reviews, and mentoring APAC cybersecurity colleagues.
Location: Shanghai, China
Company
is a global consumer intelligence company providing retail measurement, consumer insights, advanced analytics, and technology platforms across more than 100 markets.
What you will do
- Lead China-relevant cybersecurity certifications, including ISO 27001 and MLPS, and coordinate regulatory compliance activities.
- Interpret China cybersecurity and data protection requirements and coordinate remediation with Legal, Privacy, Technology, and global Cybersecurity teams.
- Support APAC customers, RFPs, security questionnaires, due diligence requests, attestations, and contract negotiations.
- Provide cybersecurity leadership for APAC technology deployments, M&A due diligence, integration planning, and risk remediation.
- Maintain visibility of regional assets, risks, exceptions, evidence, and remediation progress, escalating issues with clear business impact.
- Mentor two APAC Cybersecurity team members and coordinate regional security awareness and training activities.
Requirements
- Business-fluent Mandarin and English, with communication skills for executives, customers, auditors, and technical teams.
- Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Risk Management, Business, or a related field, or equivalent practical experience.
- At least five years of experience in cybersecurity, technology risk, information security governance, compliance, audit, consulting, or a related discipline.
- Experience supporting ISO 27001 or comparable information security management systems, including audit preparation, evidence collection, and remediation management.
- Working knowledge of China cybersecurity and data protection requirements, including MLPS, the China Cybersecurity Law, Data Security Law, and Personal Information Protection Law.
- Experience with customer security reviews, RFPs, security questionnaires, security attestations, stakeholder management, and mentoring.
Nice to have
- CISSP, CISM, CISA, ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, or a comparable certification.
- Experience in multinational, data-driven, technology, retail, analytics, or professional-services environments.
- Experience with M&A cybersecurity due diligence, post-acquisition integration, or collaboration across APAC and globally distributed teams.
Culture & Benefits
- Flexible working environment.
- Volunteer time off.
- LinkedIn Learning.
- Employee Assistance Program.
- Inclusive workplace with human oversight in recruitment and AI-supported hiring processes.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →