About The Role

Scope of Position

The Compliance Program Manager (IC) is a Subject Matter Expert (SME) responsible for managing the complex compliance program without direct people management responsibilities. This role focuses on the technical execution of high-value audit areas, engaging directly with 1st Line technical teams to design controls and interpret requirements for specific domains (e.g., cloud, SaaS, networking, system architecture, data flows, and security controls).

Job Responsibilities

Program Ownership: Independently manage end-to-end audit programs for specific high-risk or complex technical areas. Interpret MLPS and China Cybersecurity Law. Prepare materials for local Public Security Bureau filing.
Technical Advisory: Act as a consultant to 1st Line technical teams, helping them design controls that are "compliant by design." Classify systems by MLPS level and define system boundaries.
Complex Testing: Perform advanced testing and validation of complex IT controls that require deep technical understanding.
Audit Facilitation: Serve as the primary coordinator for licensed third-party assessment coordination and ongoing regulatory inspections regarding complex technical inquiries and walkthroughs.
Root Cause Analysis: Lead deep-dive investigations into control failures to identify root causes and propose technical solutions.
Artifact Management: Curate and maintain the integrity of complex audit artifacts and system configurations.
Bachelor’s degree in information systems, Accounting, Business, or a relevant field.
4-6 years of detailed IT audit experience.
Strong understanding of MLPS, COBIT, and technical IT domains (e.g., OS, DB, Network).
Fluent in Mandarin and English
Legally eligible to work in China
Ability to work autonomously and drive projects to completion without direct supervision.
Strong data analytics and visualization skills.
Certification: CISA or CIA preferred.