Staff, Privacy Compliance Monitoring

Team Description:

Infosec & privacy compliance team have mission identifying non-compliance by monitoring and assessing whether the employees and services across business for all geographies that handling confidential information such as sensitive information and personal information are complying with the regulations requirements and supporting the prompt remediate of identified risk factors.

Key Responsibilities:

• Setting priorities for remediation information security and privacy compliance issues and risks
• Understand information security and privacy compliance violation issues and risks and suggest remediation methods or alternatives
• Explain how to remediate issues and risks to stakeholders, such as developers or users, and persuade them to remediate.
• Properly manage internal and external conflict to find the correct information security and privacy compliance solution
• Tracking and managing information security and privacy compliance issues and risks

Basic Qualifications:

• Bachelor’s Degree is required.
• More than 10 years of information security and privacy compliance experience
• Ability to review business process and identify and improve issues
• Experience with information security and privacy compliance risk management
• High-level technical experience and understanding of IT infrastructure, service and cloud environment, and micro service architecture
• High level understanding of privacy compliance law and regulation requirements, and security policies
• High level understanding of information security and privacy related certification requirements
• Ability to high quality create report
• Communication skill
• Experience of compliance response

Preferred Qualifications:

• High level of experience and understanding of the AWS environment
• Experience of information security and privacy audit
• Experience in understanding and checking overseas personal information protection laws such as the United States, Japan, and China.
• Security certificate holders (CISA, CISSP, CCSP, ISO27001, ISO27701, ISMS-P Auditor, and Other)