Student Veterans of America Jobs

Welcome to SVA’s jobs portal, your one-stop shop for finding the most up to date source of employment opportunities. We have partnered with the National Labor Exchange to provide you this information. You may be looking for part-time employment to supplement your income while you are in school. You might be looking for an internship to add experience to your resume. And you may be completing your training ready to start a new career. This site has all of those types of jobs.

Here are a few things you should know:
  • This site is mobile friendly. You do not need a log-in or password to access information.
  • Jobs on this site are original and unduplicated and come from three sources: the Federal government, state workforce agency job banks, and corporate career websites. All jobs are vetted to ensure there are no scams, training schemes, or phishing.
  • The site is refreshed daily to remove out-of-date content.
  • The newest jobs are listed first, so use the search features to match your interests. You can look for jobs in a specific geographical location, by title or keyword, or you can use the military crosswalk. You may want to do something different from your military career, but you undoubtedly have skills from that occupation that match to a civilian job.

Job Information

Marriott Senior Manager, Data Compliance & Security, GC in Shanghai, China

Job Number 24035352

Job Category Information Technology

Location Shanghai Operations, 9/F Tower B One ITC, Shanghai, Shanghai, China

Schedule Full-Time

Located Remotely? N

Relocation? N

Position Type Management

JOB SUMMARY

The candidate will be responsible for governing the data compliance and security for Greater China, with the compliance requirements arising from the Personal Information Protection Law in China and Cross Border Data Transfer requirements. Partnering with privacy team on data related regulatory and compliance activities and responsible for data cross border related regulatory assessment & reporting. Providing data governance functions to ensure data protection measures are planned, executed and regularly checked according to internal policy and external compliance requirement. Work closely with Headquarter data security and governance team to support data classification, data discovery, data loss prevention and data right management project and initiatives. Collaborating with stakeholders across legal, IT and business departments to develop strategies for securing company information and assets. Shares responsibility for planning, directing, and coordinating compliance activities pertaining to technology projects for a given business unit. Verifies that project goals are accomplished and in line with business objectives.

The candidate will also be responsible for supporting the overall Greater China security policy management and control framework including review and update policy, procedures, and standards, communicate and ensuring business operation are compliant with latest security policies and procedures.

Excellent communication skills are required to effectively communicate (verbally and written) across all levels within the organization.

CANDIDATE PROFILE

Education and Experience

Required:

  • Bachelor/Master's degree with an emphasis on Information Systems, Information Technology, Information/Cyber Security, Privacy and Data Protection, Computer Science/Engineering

  • 7+ years of progressive information technology/security experience including:

  • 3+ years’ security governance experience including implementing, managing and governing security policies.

  • 3+ years’ experience in China data privacy laws, data protection related field.

  • Fluent in both Chinese and English.

Candidate Attributes:

  • Possession of good communication skills (including soft skills, structured thinking, effective report writing and presentations, and stakeholder engagement)

  • A team player, with positive attitude and enthusiasm in the performance of responsibilities

  • Strong innovative thinking, able to continuously enrich and improve the security policy, procedure and standards.

Preferred:

  • Understanding industry practice and framework on security and privacy management and technical security components, such as Cloud, application, digitalization and network, etc.

  • A security certification such as Certified in Risk and Information Systems Controls (CRISC), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), Certified Data Privacy and Security Engineer (CDPSE) or Certified Information Systems Security Professional (CISSP)

  • Technical knowledge in one or more of the following areas is required: Application Security, Operating System security (UNIX, Windows, Mainframe, etc.) and network security (routers, switches, firewalls)

  • Success experience a transparent, measurable privacy or data protection regulatory program preferred.

  • Proficiency in using data analysis tools is preferred; (Power BI, Tableau etc.)

CORE WORK ACTIVITIES

Data Compliance & Data Security

  • Develop, enhance, and operationalize data protection, privacy, and related security policies, processes, and controls to comply with applicable laws, regulations, and standards from information security perspective.

  • Monitor and assess the effectiveness of data protection, privacy, and related security controls and work closely with Information technology, Legal and business stakeholders on compliance validation, gap analyses, and process improvement.

  • Advise on cross-border data transfer requirements and report on different data processing scenarios.

  • Perform security controls assessments of data processing system – assess security architecture, adherence to the requirements, conduct application scanning and results validation.

  • Document controls gap analysis and risk assessment of the critical data system.

  • Manage and administer processes and tools that enable the organization to identify, classified, document, and track data risks and compliance exceptions

  • Lead, participate or perform various data classification, data discovery, data loss prevention and data right management project and initiatives.

Policy management

  • Enhance the Common Control Framework with additional local market data regulatory requirements.

  • Review & update internal security policy, procedure, standards on routine basis.

  • Communicate key policy updates to relevant stakeholders, identify potential impacts, and provide training and guidance.

Managing Projects and Priorities

  • Champions leaders’ vision for product and service delivery.

  • Thinks creatively and practically to develop, execute, and implement new project plans.

  • Generates and provides accurate and timely results in the form of reports, presentations, etc.

  • Plans, develops, implements, and evaluates the quality of operations.

Delivering on the Needs of Key Stakeholders

  • Understands and meets the needs of key stakeholders.

  • Communicates concepts in a clear and persuasive manner that is easy to understand.

  • Demonstrates an understanding of business priorities.

  • Supports achievement of performance goals, budget goals, team goals, etc.

Providing Technical Support and Consultation

  • Provides recommendations to improve the effectiveness of processes and programs.

  • Demonstrates advanced knowledge of job-relevant issues, products, systems, and processes.

  • Demonstrates advanced knowledge of function-specific procedures.

  • Applies knowledge/judgment to achieve business goals.

  • Foresees, identifies, and resolves problems.

  • Keeps up-to-date technically and applies new knowledge to job.

  • Performs other reasonable duties as required for this position.

Marriott International is an equal opportunity employer. We believe in hiring a diverse workforce and sustaining an inclusive, people-first culture. We are committed to non-discrimination on any protected basis, such as disability and veteran status, or any other basis covered under applicable law.

Marriott International is the world’s largest hotel company, with more brands, more hotels and more opportunities for associates to grow and succeed. Be where you can do your best work,​ begin your purpose, belong to an amazing global​ team, and become the best version of you.

DirectEmployers