[Skip to main content](#main-content)

[OpenNash Jobs](https://jobs.opennash.com/)
[Hiring report](/reports/hiring/) · [All Trip.com Group jobs](https://jobs.opennash.com/companies/trip-group/) · [Search jobs](/search/)

Trip.com Group · Shanghai

# IT GRC Specialist

Shanghai IT & Infrastructure 

Listed on Trip.com Group’s official careers site. Posted July 10, 2026. Check that it is still open and apply there.
[Apply on Trip.com Group’s careers site →](https://careers.trip.com/#/job-detail?fromId=MJ035945&atsApiType=Moka)

[OpenNash Jobs](https://jobs.opennash.com/) / [Trip.com Group](https://jobs.opennash.com/companies/trip-group/) / IT GRC Specialist

## Job description

职位描述 - Support global GRC initiatives and provide operational support to the Head of IT GRC across Trip.Biz.
- Coordinate ISO 27001, SOC 2, PCI DSS or similar certification and audit activities, including evidence collection and remediation tracking.
- Support client security assessments, RFP questionnaires, and due-diligence reviews across global markets.
- Maintain risk registers, track remediation actions, and support periodic risk assessments across systems and projects.
- Coordinate internal and external audits and support regulatory or contractual compliance documentation.
- Work with product, R&D, legal, and security teams to validate controls and ensure compliance alignment.
- Support third-party and partner security reviews where required.
- Prepare reports and materials for management and stakeholders on compliance and risk posture.
- Support global initiatives and cross-regional coordination, including travel where required. 任职资格 - Bachelor’s degree in Information Security, Computer Science, Information Systems, or a related field. - 3+ years of experience in IT governance, risk and compliance, information security, or technology risk roles.
- Experience supporting audits, certifications, or client security assessments.
- Familiarity with frameworks such as ISO 27001, SOC 2, PCI DSS, or similar.
- Experience working in multinational or global environments with cross-functional teams.
- Experience in technology, internet, SaaS, or platform-based organisations is advantageous.
- Exposure to the travel or online travel industry would be beneficial but not required.
- Strong bilingual proficiency in English and Chinese (written and spoken).
- Ability to travel internationally as business needs arise.

## At a glance
- Posted by the employer: Jul 10, 2026
- First seen by OpenNash: Oct 19, 2026
- Last checked: Oct 19, 2026
- Listed for: 101 days
- Location: Shanghai[Apply on Trip.com Group’s careers site →](https://careers.trip.com/#/job-detail?fromId=MJ035945&atsApiType=Moka)

## More jobs at Trip.com Group

### [0817 Customer Advisor_EN/IT/RU_NP_IB](https://jobs.opennash.com/companies/trip-group/jobs/ac0f92991a974c948e0d/)

Shanghai

### [HR产品经理](https://jobs.opennash.com/companies/trip-group/jobs/4457fb1f06acba63a1cc/)

Shanghai

### [IT采购商务经理 （海外）](https://jobs.opennash.com/companies/trip-group/jobs/1cf1c80837d2c473f608/)

Shanghai

### [Java开发工程师(AI工程方向)](https://jobs.opennash.com/companies/trip-group/jobs/2573176d2d3ac0c89cd2/)

Shanghai

### [Java开发工程师(AI工程方向)](https://jobs.opennash.com/companies/trip-group/jobs/ad9e24d1b43f2e9315d7/)

Shanghai

## Similar jobs at other companies

### [GRC Consultant](https://jobs.opennash.com/companies/ntt/jobs/66147d89e2636af5dd66/)

NTT · London, United Kingdom

### [PF GRC Commercial](https://jobs.opennash.com/companies/grasim-industries/jobs/d4237cc2b88cca18ccb8/)

Grasim Industries · Gujarat

### [Consultor GRC](https://jobs.opennash.com/companies/ntt/jobs/12734c206baab2aa1de6/)

NTT · Santiago de Chile, Chile

### [SAP Security & GRC Consultant](https://jobs.opennash.com/companies/accenture/jobs/f913eef1585a1c0cbfbb/)

Accenture 

### [SAP GRC Role Designer-VOIS](https://jobs.opennash.com/companies/vodafone/jobs/feb9cef502e754e81af6/)

Vodafone · Pune, Maharashtra, India

[IT & Infrastructure jobs](/functions/it-infrastructure/)

OpenNash lists jobs from employers’ own careers sites and does not handle applications.
Dates come from the employer where stated; “first seen” and “last checked” are our own observations.

OpenNash Jobs · Official listings with dates and links to the employer. [Weekly hiring report](/reports/hiring/) · [Methodology](/methodology/)