Cybersecurity Engineer (Governance, Risk & Compliance)
Xiaomi · West Region ·
- Work mode
- Onsite
- Employment
- Full time
- Category
- Security
Responsibilities
- Lead compliance initiatives by tracking, implementing, and validating controls aligned with security and privacy frameworks to protect sensitive data throughout its lifecycle
- Serve as the primary compliance expert on projects involving data security, cross-border data transfer compliance, and personal data protection, ensuring security requirements are integrated by design
- Collaborate with engineering, product, legal, and DevOps teams to guide the development and deployment of compliant technical solutions across the data lifecycle
- Develop, maintain, and enhance information security policies, standards, procedures, and guidelines to uphold compliance and security best practices
- Lead and conduct internal risk assessments across frameworks such as ISO/IEC 27001/27701, GDPR, SOC2, PCI DSS, and other relevant standards to identify and mitigate risks
- Manage the full lifecycle of cybersecurity risk remediation activities, ensuring timely mitigation of identified risks
- Oversee international security operations, incident response, and regional coordination to tailor global security strategies to local requirements
- Provide governance and oversight on security architecture for new and existing technology solutions to ensure compliance and risk mitigation
Preferred competencies and qualifications
- Professional certifications such as CISSP, CISA, PMP, CIPM, ISO 27XXX Lead Auditor, or equivalent credentials
- Bachelor’s degree or higher in Computer Science, Information Systems, Cybersecurity, or related field, or equivalent practical experience
- Minimum 2 years of hands-on experience in information security, with at least 2 years focused on data security, compliance, risk, and governance (GRC)
- Strong understanding of data security principles including encryption, tokenization, data masking, and access controls, as well as international data privacy regulations such as GDPR and PDPA
- Proven project management and organizational skills with experience collaborating effectively within multicultural and cross-functional teams
- Ability to manage multiple priorities effectively in a fast-paced environment under tight deadlines
- Proficiency in Mandarin to support coordination and collaboration with Mandarin-speaking stakeholders and regional teams
- Proficiency in English for effective communication and collaboration across teams