# 2027 Fresh Grad Hire - Security Compliance Engineer

**Company:** [moomoo](https://jobs.workable.com/companies/rYBPx6Li26wNSnbH8JV4qn.md)
**Location:** Hong Kong, Hong Kong
**Workplace:** on site
**Employment type:** Full-time

[Apply for this job](https://jobs.workable.com/view/41855169-43b8-4ba2-be4f-5afdb2f26283)

## Description

-   Assist in maintaining and continuously improving the company's overseas business security management system, and participate in the day-to-day operation of international security management frameworks such as ISO 27001/27017/27018 and SOC 2.
-   Track and study overseas cybersecurity and data protection regulations (e.g., GDPR, CCPA/CPRA, Hong Kong PDPO, Singapore PDPA), and assist in conducting compliance gap analyses and follow-up on remediation.
-   Participate in security compliance assessments, risk assessments, and internal audits for overseas business; assist in organizing compliance self-inspections and preparing materials for external audits; compile compliance reports and track issues through to remediation closure.
-   Assist in delivering security compliance awareness training and communication for overseas regions, and participate in maintaining the security compliance knowledge base and operational guidelines.

## Requirements

-   Interest in learning about international security management frameworks and data compliance; familiarity with basic concepts such as ISO 27001, SOC 2, and PCI DSS is preferred (hands-on experience not required).
-   Familiarity with or coursework in overseas data protection regulations; understanding of GDPR and basic personal information protection concepts is preferred; knowledge of regulatory compliance requirements in the overseas financial industry is a plus.
-   Solid foundational knowledge of information security, including basic concepts of network security, system security, and data security; ability to understand the mapping between technical controls and compliance requirements.
-   Good documentation writing skills, risk awareness, and problem analysis abilities; detail-oriented and responsible, with the ability to follow up on cross-team remediation items.
-   English & Chinese as working languages: fluent reading and writing; able to read English regulations and standards documents, and to conduct day-to-day email and meeting communication in English.

**Preferred Qualifications**

-   Internship experience in security, compliance, or legal fields.
-   Participation in CTF competitions, data compliance competitions, moot court, or business analysis competitions.
-   Strong English proficiency (e.g., CET-6, excellent IELTS/TOEFL scores, or overseas exchange experience).

\*Open to candidates graduating between January 2026 and August 2027.