Alibaba Cloud Intelligence-Security & Privacy Compliance Senior Manager-Munich/ Frankfurt

Job description

1. Establish and maintain the security and privacy compliance framework for the region: conduct risk assessment and drive gap remediation for newly launched markets, and monitor regulatory developments related to cyber security, data security and AI security (e.g. the EU Cybersecurity Act, EUCS and the Cloud and AI Development Act).
2. Serve as the cloud platform's interface with local regulators, supporting regulatory audits and security inspections as well as inquiries from the regulators.
3. Maintain and expand the security certifications required for market entry in Europe, prioritising new certifications based on commercial value and urgency.
4. Act as the primary contact for European enterprise customer requests related to security compliance and privacy, delivering compliance support that covers vendor due diligence, contract security clause review, audit requests and customer meetings, maintaining customer-facing compliance materials, and developing compliance solutions based on customers' requirements.
5. Lead independent assessments with reference to the industry standards and guidelines of regulated sectors, e.g. financial services, public sector, and support key customers through cloud adoption.
6. Assess data compliance risks in AI scenarios (e.g. data use, model training and cross-border transfer) and develop AI compliance materials.

Requirements

1. Bachelor's degree in information security, computer science or a related field, or equivalent practical experience.
2. 8 years of experience in security compliance, data compliance, technology risk or compliance advisory, with working knowledge of data protection legislation and cross-border data transfer requirements; experience gained in a Big 4 firm or a consulting practice covering technology risk or data compliance is preferred.
3. Experience interpreting legal and regulatory requirements, assessing risks, and driving the remediation of identified gaps through to closure, with working knowledge of the regulations shaping the European market (e.g. NIS2, the CRA and GDPR).
4. Experience engaging regulators, auditors and enterprise customers directly as the accountable compliance representative; active involvement in industry associations or standards bodies, such as CSA, IAPP, ISACA or the EU Cloud Code of Conduct, is a plus.
5. Experience assessing compliance risk in AI scenarios, covering data use, model training and cross-border data flows, and translating the findings into actionable guidance for product and business teams.
6. Experience obtaining or implementing recognised security certifications and frameworks for cloud services, such as ISO 27001, NIST CSF and SOC 2.
7. Professional fluency in English and Mandarin, both written and spoken, with the ability to work with teams in China.
8. Experience managing multiple workstreams and setting priorities in a fast-moving, multi-market environment.