2027 Fresh Grad Hire - Security Compliance Engineer

moomoo Hong Kong, Hong Kong Island, Hong Kong S.A.R. · HK$25K–HK$45K/yr

Financial Services · 1,001-5,000 employees

Yesterday

Junior (0-2 yrs) Full-time Hong Kong S.A.R.

Create a free account to apply — email only, no card. You can also save this posting or score it against your profile with AI.

Applying here? Try the free cover letter tool — paste this posting and your résumé, no account needed.

About the role

Support the operation and improvement of overseas security management frameworks, regulatory compliance activities, risk assessments, internal audits, and external audit preparation. Help deliver compliance training, maintain guidance materials, document findings, and track remediation through closure.

What they look for

Security Compliance ISO 27001 ISO 27017 ISO 27018 SOC 2 GDPR CCPA/CPRA Hong Kong PDPO Singapore PDPA PCI DSS Information Security Network Security System Security Data Security Risk Assessment Internal Auditing

Requirements

Candidates should have foundational information security knowledge, an interest in international security frameworks and data protection regulations, and strong documentation, risk analysis, and follow-up skills. Fluent English and Chinese reading and writing are required, while relevant internships, competitions, and strong English proficiency are preferred; hands-on framework experience is not required.

Full description

Assist in maintaining and continuously improving the company's overseas business security management system, and participate in the day-to-day operation of international security management frameworks such as ISO 27001/27017/27018 and SOC 2.
Track and study overseas cybersecurity and data protection regulations (e.g., GDPR, CCPA/CPRA, Hong Kong PDPO, Singapore PDPA), and assist in conducting compliance gap analyses and follow-up on remediation.
Participate in security compliance assessments, risk assessments, and internal audits for overseas business; assist in organizing compliance self-inspections and preparing materials for external audits; compile compliance reports and track issues through to remediation closure.
Assist in delivering security compliance awareness training and communication for overseas regions, and participate in maintaining the security compliance knowledge base and operational guidelines.

Interest in learning about international security management frameworks and data compliance; familiarity with basic concepts such as ISO 27001, SOC 2, and PCI DSS is preferred (hands-on experience not required).
Familiarity with or coursework in overseas data protection regulations; understanding of GDPR and basic personal information protection concepts is preferred; knowledge of regulatory compliance requirements in the overseas financial industry is a plus.
Solid foundational knowledge of information security, including basic concepts of network security, system security, and data security; ability to understand the mapping between technical controls and compliance requirements.
Good documentation writing skills, risk awareness, and problem analysis abilities; detail-oriented and responsible, with the ability to follow up on cross-team remediation items.
English & Chinese as working languages: fluent reading and writing; able to read English regulations and standards documents, and to conduct day-to-day email and meeting communication in English.

Preferred Qualifications

Internship experience in security, compliance, or legal fields.
Participation in CTF competitions, data compliance competitions, moot court, or business analysis competitions.
Strong English proficiency (e.g., CET-6, excellent IELTS/TOEFL scores, or overseas exchange experience).

*Open to candidates graduating between January 2026 and August 2027.