Skip to content

Open nowPosted 41 days ago

海外数据治理及安全工程师 Overseas Data Security & Governance Engineer

xiaopeng/963247254 open roles

Where
Munich, Bavaria, Germany
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen now海外数据治理及安全工程师 Overseas Data Security & Governance Engineerxiaopeng/963247 · Munich, Bavaria, Germany
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on xiaopeng/963247's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.1% of postings close within 7 days. Measured by our own scanner across the market. xiaopeng/963247 postings stay open a median of 1 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.1%7 days
  4. 19.1%14 days
  5. 35.6%30 days
  6. 52.7%60 days
This job: posted 41 days ago

xiaopeng/963247 median: 1 days open

The posting

1. Data Security Governance in Europe – Manage the full lifecycle of data security and privacy compliance across the European region; lead the rollout of the Group's data security strategy, data classification & grading, and access control policies; help build and operate the European data security governance framework and operating mechanisms. 2. European Regulatory Compliance – Track regulatory developments in EU data security and cybersecurity, including GDPR, NIS2 (with Germany's NIS2UmsuCG and the Netherlands' Cbw), the EU AI Act, the Cyber Resilience Act (CRA), and the Data Act. Lead the implementation of compliance requirements such as DPIA and cross-border data transfer assessments. Build and operate dual incident notification mechanisms covering both the GDPR 72-hour and NIS2 24/72-hour timelines. 3. External Audit & Regulatory Engagement – Lead external audit preparation for European security systems (e.g., ISO/IEC 27001, ISO/IEC 27701); maintain audit evidence chains, SOPs, and drill records. Act as the security-side point of contact for Data Protection Authorities (DPAs) and other regulators, responding to inquiries, inspections, and security incident notifications. 4. HQ–Region Collaboration & New Business Security Review – As the European data security interface, collaborate with HQ Security Operations, Data Compliance, and Legal teams to support security review and risk closure for new business rollouts in Europe, such as energy storage & charging stations and smart charging. 1. 欧洲区域数据安全治理:负责欧洲区域数据安全与隐私合规业务的全生命周期管理,承接并落地集团数据安全战略、数据分类分级与权限管控策略,协助建立并运营欧洲区域数据安全治理体系与运营机制。 2. 欧洲法规合规落地:跟踪 GDPR、NIS2(含德国 NIS2UmsuCG、荷兰 Cbw)、欧盟 AI Act、CRA、Data Act 等欧洲数据安全与网络安全监管动态,主导 DPIA、数据跨境传输评估等合规要求落地,建设并运营 GDPR 72 小时与 NIS2 24/72 小时安全事件双通报机制。 3. 迎检与监管应对:负责欧洲区域安全体系迎检工作(ISO/IEC 27001、ISO/IEC 27701 等),维护迎检证据链、SOP 与演练记录;作为安全侧接口人对接各国数据保护机构(DPA)等监管机构,响应问询、检查与安全事件通报。 4. 总部-区域协同与新业务安全评审:作为欧洲数据安全接口人,与总部安全运营、数据合规、法务团队协同,支撑储充站、智能充电等新业务在欧洲落地的安全评审与风险闭环。

1. Bachelor's degree or above in Computer Science, Information Security, Law, or a related field; 5+ years of experience in data security / cybersecurity; experience across both in-house and consulting/vendor environments is preferred. 2. Solid knowledge of the European data compliance regulatory landscape, with hands-on experience in GDPR, NIS2, cross-border data transfer, DPIA/PIA, and data classification & grading. 3. Familiar with the ISO/IEC 27001 and ISO/IEC 27701 management system frameworks; hands-on experience in external audit preparation or audit response. 4. Solid data security technical background (access control, encryption, data masking, monitoring & auditing, etc.) with the ability to drive technical controls into the European region. 5. Strong cross-functional and cross-cultural communication and coordination skills; able to independently engage with regulators, external law firms, and audit bodies. 6. English as a working language; German language skills are a plus. Able to be based in Europe on a long-term basis or to take short-term overseas assignments. 1. 本科及以上学历,计算机、信息安全、法学等相关专业优先;5年以上数据安全/网络安全相关工作经验,具备甲乙方背景者优先。 2. 熟悉欧洲数据合规法规体系,熟悉GDPR、NIS2 数据跨境传输、DPIA/PIA、数据分类分级并有实际落地经验。 3. 熟悉 ISO/IEC 27001、ISO/IEC 27701 管理体系框架,有外审迎检或审核应对实操经验。 4. 具备数据安全技术基础背景(访问控制、加密、脱敏、监控审计等),能够推动技术措施在欧洲区域落地。 5. 具备较强的跨部门、跨文化沟通协调能力,能够独立对接监管机构、外部律所与审核机构。 6. 英语可作为工作语言,具备德语能力者优先;可适应常驻欧洲或短期外派。

Nice to Have 1. CISSP, CIPP/E, CISM, ISO/IEC 27001 Lead Auditor, or equivalent certifications. 2. Background in automotive, manufacturing, or the energy industry; familiar with UN R155 / CSMS or other automotive cybersecurity regulations; experience in EV charging or energy storage. 3. Prior engagement with regulators such as Germany's BSI, the Netherlands' NCSC, or European DPAs. 【加分项】 1. 持有 CISSP、CIPP/E、CISM、ISO/IEC 27001 Lead Auditor 等认证。 2. 具备汽车、制造或能源行业背景,熟悉 UN R155/CSMS 等车规,或有充电/储充业务经验。 3. 有与德国 BSI、荷兰 NCSC、欧洲 DPA 等监管机构对接经验。

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against xiaopeng/963247's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on xiaopeng/963247's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    xiaopeng/963247's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.