Manager, Cybersecurity & Information Protection (APAC&EMEA)-Base SH or BJ

Location: Shanghai, China; role title also references a base in Shanghai or Beijing. Collaboration across multiple time zones in APAC and EMEA is required.

Company

hirify.global is a global pharmaceutical and healthcare company operating in a regulated environment.

What you will do

• Advise stakeholders across APAC and EMEA on cybersecurity, information protection, and data privacy.
• Assess and manage risks related to business initiatives, applications, digital solutions, and third-party engagements.
• Lead cybersecurity and data protection compliance programs, including regulatory assessments, filings, remediation planning, audits, and inspections.
• Define information protection controls and support the development of data protection policies and standards.
• Monitor emerging threats, regulatory developments, and compliance risks while driving security awareness and risk management initiatives.
• Support cybersecurity incident response, escalation, and remediation activities.

Requirements

• Bachelor’s degree in information security, computer science, information systems, risk management, or a related field.
• 7+ years of experience in cybersecurity, information security, data protection, privacy, regulatory compliance, risk management, or a related discipline, including at least 2 years in supervisory or project leadership work.
• Strong knowledge of cybersecurity governance, risk management, compliance frameworks, and regulations including CSL, DSL, PIPL, GDPR, DPDPA, and NIS2.
• Hands-on familiarity with DLP, data discovery, data labeling, and data tagging solutions, including deployment and ongoing support.
• Working knowledge of data encryption concepts and experience coordinating projects across business and technical teams.
• Professional proficiency in English and strong stakeholder management, communication, and influencing skills.

Nice to have

• Certifications such as CISSP, CISA, CISM, CRISC, CIPP/E, or CIPM.
• Experience in pharmaceutical, healthcare, or life sciences organizations.
• Hands-on experience with GRC platforms such as Archer.
• Familiarity with privacy, intellectual property protection, and regulated data environments.

Culture & Benefits

• Work with business, technology, privacy, legal, compliance, security operations, and data protection stakeholders.
• Support cybersecurity and privacy programs across multiple APAC and EMEA jurisdictions.
• Operate in a complex, regulated pharmaceutical environment.