About this role
- Assist in maintaining and continuously improving the company's overseas business security management system, and participate in the day-to-day operation of international security management frameworks such as ISO 27001/27017/27018 and SOC 2.
- Track and study overseas cybersecurity and data protection regulations (e.g., GDPR, CCPA/CPRA, Hong Kong PDPO, Singapore PDPA), and assist in conducting compliance gap analyses and follow-up on remediation.
- Participate in security compliance assessments, risk assessments, and internal audits for overseas business; assist in organizing compliance self-inspections and preparing materials for external audits; compile compliance reports and track issues through to remediation closure.
- Assist in delivering security compliance awareness training and communication for overseas regions, and participate in maintaining the security compliance knowledge base and operational guidelines.
Requirements
-
Interest in learning about international security management frameworks and data compliance; familiarity with basic concepts such as ISO 27001, SOC 2, and PCI DSS is preferred (hands-on experience not required).
-
Familiarity with or coursework in overseas data protection regulations; understanding of GDPR and basic personal information protection concepts is preferred; knowledge of regulatory compliance requirements in the overseas financial industry is a plus.
-
Solid foundational knowledge of information security, including basic concepts of network security, system security, and data security; ability to understand the mapping between technical controls and compliance requirements.
-
Good documentation writing skills, risk awareness, and problem analysis abilities; detail-oriented and responsible, with the ability to follow up on cross-team remediation items.
-
English & Chinese as working languages: fluent reading and writing; able to read English regulations and standards documents, and to conduct day-to-day email and meeting communication in English.
-
Preferred Qualifications
-
Internship experience in security, compliance, or legal fields.
-
Participation in CTF competitions, data compliance competitions, moot court, or business analysis competitions.
-
Strong English proficiency (e.g., CET-6, excellent IELTS/TOEFL scores, or overseas exchange experience).
-
*Open to candidates graduating between January 2026 and August 2027.