安全合规工程师 Security Compliance Engineer

Responsibilities:

• Responsible for the development of company security policies and management systems, conducting internal audits, and coordinating with regulatory inspections to ensure security compliance.
• Perform regular security audits, IT system audits, and compliance checks to validate the effectiveness of information security controls, analyze root causes, and drive risk remediation.
• Apply data security compliance knowledge, interpret regulatory requirements, and assist business units in implementing compliant security solutions.
• Bachelor's degree or higher in Computer Science, Information Security, or related field.
• Familiar with information security standards and frameworks such as ISO 27001 and PCI DSS.
• Solid understanding of IT risk governance and tracking methodologies, with knowledge of corporate IT risk management and internal control processes.

Nice-To-Have:

• Experience in the financial industry, with hands-on experience with Web3/blockchain regulatory audits.
• Hold international security certifications, such as CISSP, CISM, or CISA is a plus