Senior Consultant, Regional Information Security Office

Role Overview
The Senior Consultant, Regional Information Security Office/Cyber Security Officer China is a China-based regional Cybersecurity leader for all of APAC and the primary Cybersecurity liaison for NIQ China. The role serves as a trusted advisor to APAC business and technology leaders, translating regional regulatory, customer, and business needs into practical security outcomes and connecting APAC stakeholders with NIQ’s global Cybersecurity organization. The position owns China cybersecurity certification and regulatory activities; leads APAC customer, RFP, and commercial security engagement; and provides cybersecurity leadership for regional technology and M&A initiatives.
Key Responsibilities
China certifications and regulatory compliance
Lead the planning, maintenance, surveillance, and renewal of China-relevant security certifications, including ISO 27001 and MLPS where applicable.
Interpret applicable China cybersecurity, data protection, and technology requirements and coordinate practical compliance actions with Legal, Privacy, Technology, and global Cybersecurity teams.
Maintain clear evidence, risk, remediation, and stakeholder records to support audits, certifications, and regulatory inquiries.
Drive timely resolution of security gaps and remediation commitments affecting China operations.
Customer and commercial security engagement
Serve as the APAC security partner for strategic customers, RFPs, security questionnaires, due diligence requests, and contract negotiations.
Explain NIQ’s security posture, certifications, controls, and risk decisions in a clear, commercially practical manner.
Partner with Sales, Client Success, Procurement, Legal, Product, and global Cybersecurity to address customer security requirements without creating avoidable business friction.
Identify material contractual, customer, or delivery risks and drive them to an appropriate owner and decision.
Technology and M&A security initiatives
Provide security leadership and business coordination for APAC technology initiatives, including Discover China deployments and other material regional solutions.
Support cybersecurity due diligence, integration planning, and risk remediation for APAC M&A and strategic business changes, including Project Elland as applicable.
Partner with Engineering, IT, Product, and Security Architecture to ensure local implementations align with NIQ security requirements and approved risk decisions.
Maintain visibility of local assets, material risks, exceptions, and remediation progress, escalating issues with clear business impact.
APAC regional partnership
Own the APAC regional Cybersecurity partnership, providing credible and responsive coverage to business and technology leaders across the region.
Lead APAC Cyber Business Services activities, including customer security engagement, regional sales support, and tailored security communications.
Mentor and develop the two APAC Cybersecurity team members, providing day-to-day coaching, work prioritization, and capability development while fostering strong connection to the global Cybersecurity organization.
Build productive relationships across APAC and global teams; communicate risks, decisions, and progress clearly in Mandarin and English.
Coordinate APAC security awareness and training activities, adapting global programs for regional needs and promoting secure working practices.
Required
Business-fluent Mandarin and English, with the ability to communicate effectively with executives, customers, auditors, and technical teams.
Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Risk Management, Business, or a related field, or equivalent practical experience.
Five or more years of experience in cybersecurity, technology risk, information security governance, compliance, audit, consulting, or a closely related discipline.
Demonstrated experience supporting ISO 27001 or comparable information security management systems, including audit preparation, evidence collection, and remediation management.
Working knowledge of China cybersecurity and data protection requirements, including MLPS and the China Cybersecurity Law, Data Security Law, and Personal Information Protection Law.
Experience handling customer security reviews, RFPs, questionnaires, security attestations, or security-related contract requirements.
Ability to manage competing priorities, influence without direct authority, and convert complex security requirements into clear, business-relevant actions.
Demonstrated ability to mentor colleagues, build capability in a distributed team, and provide effective day-to-day guidance without relying on formal people-management authority.
Strong judgment, ownership, written communication, and stakeholder-management skills.
Preferred
CISSP, CISM, CISA, ISO 27001 Lead Implementer or Lead Auditor, or a comparable certification.
Experience in a multinational, data-driven, technology, retail, analytics, or professional-services environment.
Experience with M&A cybersecurity due diligence or post-acquisition integration.
Experience partnering with Sales, Legal, Privacy, Procurement, Product, Engineering, or IT on complex business initiatives.
Experience working across APAC and with globally distributed teams.

Employment type
Full-time

Work arrangement
Hybrid