Job Responsibilities
- Sort out and govern the company’s current data security status.
- Take charge of the construction of the company’s data security system.
- Collaborate with the legal, compliance, audit, and business teams to ensure data security policies align with regulatory requirements.
- Provide data security design and development support to the R&D, product, and operation teams.
- Participate in and promote key management (KMS/HSM) and encryption policies, and establish a key rotation mechanism.
- Drive the construction of data security infrastructure, such as DLP (Data Loss Prevention), database auditing, and key management.
- Participate in the emergency response to data security breach incidents.
Requirements
- At least 5 years of experience in information security or data security, including practical experience in data security or encryption technology projects.
- In-depth mastery of data encryption, key management, DLP, data desensitization, database auditing, and access control mechanisms.
- Proficiency in methodologies for data security system construction and governance.
- Familiarity with international and domestic data security laws, regulations, and standards (e.g., GDPR, ISO 27001).
- Familiarity with the construction and implementation of data security capabilities on the AWS cloud platform.
- Excellent cross-departmental communication skills and the ability to drive the implementation of data security initiatives.