Senior Information Security Engineer

The Information Security Engineer is responsible for implementing, maintaining, and improving the organization’s cybersecurity program across domestic and international operations. This role provides technical expertise in security architecture, risk management, vulnerability remediation, security controls, and compliance initiatives. The position also supports ISO 27001 governance activities, facilitates communication between US and global teams, and assists with the execution of enterprise security projects and directives.

Duties/Responsibilities:

• Assess, implement, and maintain technical security controls across infrastructure, systems,

networks, and applications.

• Conduct security reviews of systems, configurations, and proposed technology changes.
• Support vulnerability management activities, including identification, prioritization, remediation

tracking, and validation.

• Perform security risk assessments for new technologies, projects, and operational processes.
• Assist with security incident investigations, root cause analysis, and corrective action planning.
• Develop and maintain security standards, procedures, and technical documentation.
• Evaluate emerging threats and recommend appropriate security countermeasures.

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science.
• Cybersecurity Engineering
• Risk Assessment & Management
• Vulnerability Management
• Security Architecture Review
• ISO 27001 Lead Auditor or Internal Auditor certification.

• Technical Documentation

• Cross-Functional Collaboration
• Bilingual Communication (English/Mandarin)
• Security Testing, * Master’s degree is preferred.
• 2-5+ years of information security, cybersecurity, or IT security experience.
• Thesis or publication in information security is a plus.
• Experience with ISO 27001 and TISAX implementation, auditing, or compliance management.
• Experience working within multinational organizations.
• Strong understanding of risk management, security controls, and security governance frameworks.
• Professional proficiency in both English and Mandarin Chinese.
• EC-Council Certified Ethical Hacker (CEH) certification is also preferred.

Physical Requirements:

• Ability to walk and stand on cement floors for extended periods.
• Ability to stand, stoop, bend, and perform repetitive tasks.
• Prolonged periods of sitting at a desk and working on a computer.
• Must be able to lift to thirty pounds at a time.