Senior Consultant, Regional Information Security Office (Cybersecurity)

Location: Shanghai, China; hybrid workplace

Company

hirify.global is a global consumer intelligence company providing retail measurement, consumer insights, advanced analytics, and technology platforms across more than 100 markets.

What you will do

• Lead China-relevant security certification, surveillance, renewal, audit evidence, risk, and remediation activities, including ISO 27001 and MLPS where applicable.
• Interpret China cybersecurity, data protection, and technology requirements and coordinate compliance actions with Legal, Privacy, Technology, and global Cybersecurity teams.
• Serve as the APAC security partner for strategic customers, RFPs, questionnaires, due diligence, security attestations, and contract negotiations.
• Provide cybersecurity leadership for APAC technology deployments, M&A due diligence, integration planning, and regional business changes.
• Own APAC Cyber Business Services and communicate security risks, decisions, and progress to business and technology leaders, customers, auditors, and technical teams.
• Mentor and develop two APAC Cybersecurity team members and coordinate regional security awareness and training activities.

Requirements

• Business-fluent Mandarin and English, with effective communication skills for executives, customers, auditors, and technical teams.
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Risk Management, Business, or a related field, or equivalent practical experience.
• Five or more years of experience in cybersecurity, technology risk, information security governance, compliance, audit, consulting, or a closely related discipline.
• Experience supporting ISO 27001 or comparable information security management systems, including audit preparation, evidence collection, and remediation management.
• Working knowledge of China cybersecurity and data protection requirements, including MLPS, the China Cybersecurity Law, Data Security Law, and Personal Information Protection Law.
• Experience handling customer security reviews, RFPs, questionnaires, security attestations, or security-related contract requirements.
• Ability to manage competing priorities, influence without direct authority, translate complex security requirements into business-relevant actions, and exercise strong judgment and ownership.
• Ability to mentor colleagues, build capability in a distributed team, provide day-to-day guidance without formal people-management authority, and manage stakeholder relationships effectively.

Nice to have

• CISSP, CISM, CISA, ISO 27001 Lead Implementer or Lead Auditor, or a comparable certification.
• Experience in a multinational, data-driven, technology, retail, analytics, or professional-services environment.
• Experience with M&A cybersecurity due diligence or post-acquisition integration.
• Experience partnering with Sales, Legal, Privacy, Procurement, Product, Engineering, or IT on complex business initiatives.
• Experience working across APAC and with globally distributed teams.

Culture & Benefits

• Flexible working environment with a hybrid workplace.
• Volunteer time off.
• LinkedIn Learning.
• Employee Assistance Program.
• AI tools may be used during recruitment, with human oversight and final hiring decisions made by humans.