信息安全经理 Information Security Manager at The Walt Disney Company

Shanghai, Shanghai, China

Apply Now

Not SpecifiedCompensation

Senior (5 to 8 years), Expert & Leadership (9+ years)Experience Level

Full TimeJob Type

UnknownVisa

Technology, Digital Media, EntertainmentIndustries

Requirements

Bachelor's degree or above in computer science, information security, software engineering, or related fields
6–10 years of experience in privacy engineering, information security, or privacy compliance; IT project management experience preferred
Deep understanding of China's privacy regulations (PIPL, DSL, CSL) and relevant GB/T standards
Familiarity with international privacy frameworks (e.g., GDPR) is a plus
Ability to understand and clearly explain privacy-related technical concepts (e.g., encryption, de-identification, pseudonymization) and translate them into actionable guidelines
Proven experience managing cross-functional projects and driving compliance initiatives
Excellent written English skills to draft clear, detailed guidelines and documents for technical and non-technical audiences
Outstanding communication, presentation, and interpersonal skills
Fluent in spoken and written Chinese and English

Responsibilities

Interpret and continuously monitor technical requirements under China's privacy laws (PIPL, DSL, CSL) and relevant GB/T standards, translating them into actionable technical specifications and process guidelines
Define privacy engineering requirements and checkpoints in the software development lifecycle (SDLC), ensuring integration into product development processes
Incorporate privacy non-functional requirements (NFRs) into design reviews and releases
Guide and drive engineering and product teams to implement privacy controls, such as data minimization, encryption, de-identification, data retention, logging/auditability, role-based access control, and consent management
Maintain an up-to-date inventory of personal data across systems and support privacy impact assessments (DPIA) and cross-border data transfer assessments
Review third-party SDKs, trackers, and cloud configurations; support vendor privacy assessments, privacy impact assessments, and cross-border data transfer evaluations to ensure compliance
Act as privacy project manager to lead implementation of privacy initiatives in Tech & Digital teams, ensuring timely delivery and risk mitigation
Coordinate with Legal, InfoSec, Tech & Digital, and business teams to embed privacy requirements into products and processes
Prepare documentation, presentations, and reports for internal stakeholders and regulatory purposes
Collaborate with Privacy Legal team to conduct privacy awareness training and promote a privacy-compliant culture organization-wide
Support incident response activities related to personal data, including documentation and lessons learned

Skills

Key technologies and capabilities for this role

Privacy by DesignPIPLDSLCybersecurity LawGB/T StandardsGDPRSDLCPrivacy EngineeringData MinimizationEncryptionDe-identificationRBACConsent ManagementDPIACross-border Data TransferProject ManagementIncident Response

Questions & Answers

Common questions about this position

What is the location for this Information Security Manager role?

The position is based in Shanghai, China.

What experience and education are required for this position?

Candidates need a bachelor's degree or above in computer science, information security, software engineering, or related fields, along with 6–10 years of experience in privacy engineering, information security, or privacy compliance. IT project management experience is preferred.

What key skills are essential for success in this role?

Profound understanding of Chinese privacy laws (PIPL, DSL, CSL) and GB/T standards, ability to translate technical concepts into actionable guidelines, cross-functional project management experience, excellent written English for technical documentation, and fluent Mandarin and English communication skills are required.

What teams will I collaborate with in this role?

The role is part of the Information Security team and involves close collaboration with Legal, InfoSec, Engineering, Tech & Digital, and business teams, acting as a bridge between them.

What makes a strong candidate for this Information Security Manager position?

A strong candidate has a technical background in IT or engineering, proven success in managing cross-functional projects, deep knowledge of Chinese privacy regulations, familiarity with international frameworks like GDPR, and excellent English writing skills for technical documentation.