Compliance Program Manager – GT Compliance

Job description

Scope of Position The Compliance Program Manager (IC) is a Subject Matter Expert (SME) responsible for managing the complex compliance program without direct people management responsibilities. This role focuses on the technical execution of high-value audit areas, engaging directly with 1st Line technical teams to design controls and interpret requirements for specific domains (e.g., cloud, SaaS, networking, system architecture, data flows, and security controls).

Job Responsibilities

Program Ownership: Independently manage end-to-end audit programs for specific high-risk or complex technical areas. Interpret MLPS and China Cybersecurity Law. Prepare materials for local Public Security Bureau filing.

Technical Advisory

Act as a consultant to 1st Line technical teams, helping them design controls that are "compliant by design." Classify systems by MLPS level and define system boundaries.

Complex Testing

Perform advanced testing and validation of complex IT controls that require deep technical understanding.

Audit Facilitation

Serve as the primary coordinator for licensed third-party assessment coordination and ongoing regulatory inspections regarding complex technical inquiries and walkthroughs.

Root Cause Analysis

Lead deep-dive investigations into control failures to identify root causes and propose technical solutions.

Artifact Management

Curate and maintain the integrity of complex audit artifacts and system configurations.

Qualifications

Bachelor’s degree in information systems, Accounting, Business, or a relevant field. 4-6 years of detailed IT audit experience. Strong understanding of MLPS, COBIT, and technical IT domains (e.g., OS, DB, Network). Fluent in Mandarin and English Legally eligible to work in China Ability to work autonomously and drive projects to completion without direct supervision. Strong data analytics and visualization skills.

Certification

CISA or CIA preferred.