苹果Manager, Technology Compliance, Greater China

工作描述

Qualifications
Minimum Qualifications
8+ years of experience in technology compliance, IT audit, risk management, information security, privacy, or data governance
2+ years of experience leading teams, or leading large cross-functional programs with demonstrated ownership of scope, staffing, and outcomes
Experience hiring, coaching, and developing people, or a clear track record of technical mentorship and readiness to build a team
Experience defining compliance or risk program strategy and designing the frameworks, methodologies, and controls that operationalize it
Hands-on experience across multiple compliance regimes, such as PIPL, SOX / ITGC, PCI DSS, MLPS, GDPR, CCPA/CPRA, ISO 27001, or comparable frameworks
Experience with regulatory requirements applicable to technology operations in China
Experience with data classification, data governance, data inventories, or data-flow mapping
Familiarity with cloud environments, enterprise applications, APIs, data platforms, and software development life cycle methodologies
Ability to evaluate technical designs and architectures against control objectives and articulate gaps to both engineering and non-technical audiences
Demonstrated ability to translate regulatory, policy, or control requirements into practical and scalable processes
Experience influencing senior stakeholders and building consensus across matrixed, cross-functional organizations
Professional fluency in both Mandarin and English, with strong written and verbal communication skills in each, including the ability to frame complex concepts for executive audiences
Ability to operate effectively in an ambiguous, evolving regulatory environment and to set direction for others within it
Bachelor's degree or equivalent practical experience

Preferred Qualifications
Audit or advisory experience at a Big 4 or comparable professional services firm, including experience leading engagement teams
Experience building a compliance, privacy, or risk function from an early stage
Experience with PIPL implementation at scale, including cross-border data transfer governance and security assessment or standard contract filing
Experience managing SOX ITGC scoping, testing, and remediation cycles for ent…