Data Security Governance Engineer

Tasks

1. Based on laws and regulations and best industry practices, help establish and improve RD's data security and data compliance management system. Promote and ensure its implementation, including risk assessment, consultation, and mitigation.
2. Support the preparation of authority audits, reporting, filing, onsite inspections, and other activities based on authority requests and company needs. Lead the implementation of identified governance measures, including data categorization and classification, RD round tables, and GenAI evaluation.
3. Promote publicity and training covering data security management systems, strategy and goals, processes, and requirements. Enhance data security and data compliance awareness among RD China employees based on national and international laws, regulations, and technical standards.
4. Be responsible for data security risk management. Identify and evaluate data security risks in the development lifecycle and propose compliance improvement suggestions for identified risks.
5. Carry out regular governance activities, including spot checks of DPA, DPIA, data clearing, and related activities.

Qualifications

• Bachelor's degree or above in electrical engineering, electronics engineering, automotive engineering, computer science, software engineering, or another engineering discipline.
• At least 3 years of work experience in data security, data management, data compliance, or privacy protection. Experience in mainstream OEMs and multinational companies is preferred.
• Comprehensive understanding of domestic and international data security and data protection regulations and standards, including GDPR, the Personal Information Protection Law, the Data Protection Law, Several Provisions on Vehicle Data Security Management, GB/T-44464, and personal information security norms. Practical experience with DPIA and Privacy by Design is required.
• Experience setting up, operating, or implementing data security or data compliance management systems. Familiarity with the development process for information or data security regulations and technical standards, and related assessment and certification methods.
• Familiarity with data and privacy protection technologies, including data categorization and classification, data desensitization, and data encryption. Experience identifying risks in different data processing scenarios and designing and implementing data security and privacy protection solutions is preferred.
• CISP-DSG certification is preferred.
• Good English communication and writing skills, strong motivation, logical execution, project management, operational coordination, problem-handling, documentation, and writing skills.

Benefits

Employee events, flextime, possible hybrid work, health benefits, mobility offers, employee discounts, good public transport, a barrier-free workplace, parking, an in-house doctor, and a canteen and café.

Contact

Mercedes-Benz Group China Ltd., LSH Tower C, 8 Wangjing Street, 100102 Beijing. Wenwen Wang: wenwen.wang@mercedes-benz.com