2027 Fresh Grad Hire - Security Compliance Engineer

Location: Hong Kong, Hong Kong, Hong Kong, Shenzhen, Guangdong Province, China

Workplace: on_site

Employment Type: full

Description

• Assist in maintaining and continuously improving the company's overseas business security management system, and participate in the day-to-day operation of international security management frameworks such as ISO 27001/27017/27018 and SOC 2.
• Track and study overseas cybersecurity and data protection regulations (e.g., GDPR, CCPA/CPRA, Hong Kong PDPO, Singapore PDPA), and assist in conducting compliance gap analyses and follow-up on remediation.
• Participate in security compliance assessments, risk assessments, and internal audits for overseas business; assist in organizing compliance self-inspections and preparing materials for external audits; compile compliance reports and track issues through to remediation closure.
• Assist in delivering security compliance awareness training and communication for overseas regions, and participate in maintaining the security compliance knowledge base and operational guidelines.

Requirements

• Interest in learning about international security management frameworks and data compliance; familiarity with basic concepts such as ISO 27001, SOC 2, and PCI DSS is preferred (hands-on experience not required).
• Familiarity with or coursework in overseas data protection regulations; understanding of GDPR and basic personal information protection concepts is preferred; knowledge of regulatory compliance requirements in the overseas financial industry is a plus.
• Solid foundational knowledge of information security, including basic concepts of network security, system security, and data security; ability to understand the mapping between technical controls and compliance requirements.
• Good documentation writing skills, risk awareness, and problem analysis abilities; detail-oriented and responsible, with the ability to follow up on cross-team remediation items.
• English & Chinese as working languages: fluent reading and writing; able to read English regulations and standards documents, and to conduct day-to-day email and meeting communication in English.

Preferred Qualifications

• Internship experience in security, compliance, or legal fields.
• Participation in CTF competitions, data compliance competitions, moot court, or business analysis competitions.
• Strong English proficiency (e.g., CET-6, excellent IELTS/TOEFL scores, or overseas exchange experience).

*Open to candidates graduating between January 2026 and August 2027.