Data Compliance Manager

Job Mission

Provide operational & strategic support to uphold company data compliance under CSL, DSL, PIPL and relevant regulations. Translate legal requirements into practical technical and organizational controls. Support the independent DPO to roll out compliance programs, mitigate legal and reputational risks and fulfill statutory obligations.

Key Responsibilities

• Maintain China data compliance framework, support audits, monitor regulatory updates and share business impacts with stakeholders.
• Keep records of key data & personal information processing activities, track data flow changes.
• Organize CBDT security assessments, submit and update regulatory reports on schedule.
• Lead Industrial Internet grading assessments, annual data security risk assessments and PIPIA/DPIA for high‑risk personal data processing.
• Respond to ad‑hoc regulatory requirements from authorities.
• Manage MLPS assessments for applicable IT systems.
• Conduct DRMT‑based compliance risk reviews for new China‑related IT projects and give advisory input.
• Support data incident response, implement remediation and prepare mandatory notifications for regulators and affected users.
• Act as cross‑functional liaison with IT, legal, HR and business teams; serve as secondary contact for regulators and data subject rights requests.
• Run regular compliance training, build compliance‑by‑default culture and manage central compliance documentation.

Qualifications & Requirements

• Bachelor’s degree or above in Law, Computer Science or related field.
• 3‑5 years of mixed IT/OT security and data compliance experience; CBDT / MLPS project experience preferred.
• Deep understanding of China’s data regulations and information security; CISA / CISSP / legal qualification is a plus.
• Ability to translate complex legal rules into actionable business & IT requirements.
• Fluent English & Mandarin (written & spoken); strong professional report‑writing skills.