Data Expert_C
Core
Regional Information Security and Data Protection expert ensuring compliance with Chinese laws (PIPL, DSL, CSL) and Bosch Group directives for a regional business and clients.
Role type
Senior Information Security and Data Compliance Expert
Builds
Unified data classification management system, internal IT security standards, and compliance audit frameworks for cloud platforms and IT applications.
Domain
Information Security, Data Protection, Cybersecurity, Chinese Regulatory Compliance
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Chinese cybersecurity and data compliance regulations expertise, technical security assessment, data classification management, cross-border data transfer risk assessment, security audit management, regulatory communication, training design and delivery, risk landscape management
Preferred skills
Programming/Penetration test experience, Project management experience, IAPP-E/A, CISSP, CISA, ISO/IEC 27001, CISP, PI China Auditor, MIIT area certificate
Technologies
PIPL, DSL, CSL, MLPS, VSDM, Cloud platforms, API security tools
Responsibilities
Update and maintain regional ISP regulatory frameworks, conduct technical security assessments across multiple scenarios, liaise with internal CGA teams and external regulatory authorities, drive industry-level technical lobbying, provide professional support to GE teams, assist business units in coordinating external audit work, organize and execute internal information security audits, report key security risks to senior management, design and deliver information security awareness training, monitor newly issued laws and regulations, establish connections with peer enterprises and industry organizations
Seniority
Senior, hands-on IC with strategic advisory elements