2027 Fresh Grad Hire - Security Compliance Engineer

Assist in maintaining and continuously improving the company's overseas business security management system, and participate in the day-to-day operation of international security management frameworks such as ISO 27001/27017/27018 and SOC 2.
Track and study overseas cybersecurity and data protection regulations (e.g., GDPR, CCPA/CPRA, Hong Kong PDPO, Singapore PDPA), and assist in conducting compliance gap analyses and follow-up on remediation.
Participate in security compliance assessments, risk assessments, and internal audits for overseas business; assist in organizing compliance self-inspections and preparing materials for external audits; compile compliance reports and track issues through to remediation closure.
Assist in delivering security compliance awareness training and communication for overseas regions, and participate in maintaining the security compliance knowledge base and operational guidelines.
Requirements
Interest in learning about international security management frameworks and data compliance; familiarity with basic concepts such as ISO 27001, SOC 2, and PCI DSS is preferred (hands-on experience not required).
Familiarity with or coursework in overseas data protection regulations; understanding of GDPR and basic personal information protection concepts is preferred; knowledge of regulatory compliance requirements in the overseas financial industry is a plus.
Solid foundational knowledge of information security, including basic concepts of network security, system security, and data security; ability to understand the mapping between technical controls and compliance requirements.
Good documentation writing skills, risk awareness, and problem analysis abilities; detail-oriented and responsible, with the ability to follow up on cross-team remediation items.
English & Chinese as working languages: fluent reading and writing; able to read English regulations and standards documents, and to conduct day-to-day email and meeting communication in English.
Preferred Qualifications
Internship experience in security, compliance, or legal fields.
Participation in CTF competitions, data compliance competitions, moot court, or business analysis competitions.
Strong English proficiency (e.g., CET-6, excellent IELTS/TOEFL scores, or overseas exchange experience).
*Open to candidates graduating between January 2026 and August 2027.

Work arrangement
No