Data Security Engineer - GEC - Singapore

The Investment Finance team handles transaction-related financial work across equity investments, M&A and exits, restructurings, and post-investment management, staying involved through the full transaction lifecycle. That includes financial due diligence to identify transaction risks, driving findings to conclusions and solutions, participating in deal structure design and evaluation, and reviewing transaction terms.

The team also leads financial integration for M&A and restructuring projects and monitors portfolio company performance and risk on an ongoing basis. Every deal is different, requiring us to rapidly understand complex business models, identify hidden financial risks, and deliver actionable insight under tight timelines.

This role offers a direct path from financial expertise to real investment decisions and deal outcomes. You will work across the full deal lifecycle, from structuring and closing through integration and ongoing portfolio monitoring, building a well-rounded skill set at pace. Working alongside strong business and functional teams, you will operate in complex, high-stakes commercial environments where your contribution matters.

Team Introduction
We are the Global E-Commerce Security BP team. We partner closely with product, engineering and operations to safeguard Global E-Commerce across regions. Our scope covers application security, data security and architecture security. We build and operate the SL/DevSecOps security program, conduct threat modeling, code reviews, penetration testing, red/blue exercises and vulnerability management, respond to security incidents rapidly and drive systemic fixes. We value pragmatism, ownership and cross-team collaboration, protecting business growth and user trust at global scale.

Responsibilities
- Responsible for planning and customizing data security management systems, planning and building an internal data security protection system, and enhancing data security.
- Plan the design and implementation of data security products (including data hierarchical governance, data asset maps, data lineage tracking applications, data encryption, data sharing, permission management, security audits, and baseline development applications).
- Promote data security risk management (including risk identification and discovery, solution development and governance promotion, continuous improvement and optimization, and post-event follow-up).
- Continuously verify the effectiveness of data security control measures, and follow up on the identification, response, disposal, investigation, and evidence collection of data security incidents.

Minimum Qualifications
- Major in information security, network security, or computer science.
- Familiarity with the data security lifecycle, understanding of data security risk points and key development tasks within each lifecycle, and extensive experience in building data security systems.
- Familiarity with common security attack and defense techniques and closed-loop risk management approaches, with extensive practical experience in data security risk identification and governance, and a strong understanding of data sensitivity.
- Familiarity with data security products, such as data leakage prevention, UEBA, sensitive data identification, data encryption and decryption, and data sharing, with experience in data security product planning, design, development, and operational implementation.
- Familiarity with enterprise-level big data security issues, such as Hadoop, HDFS, and ElasticSearch. Practical experience in information security data mining, data analysis, and intelligence analysis is preferred.
- Strong logical thinking, stress tolerance, communication and coordination skills, and project management skills.