{"id":1943760,"url":"https://alion.io/job/dtcpay-data-security-and-compliance-engineer","title":"Data Security and Compliance Engineer","company":{"id":175075,"name":"dtcpay","domain":"dtcpay.com","url":"https://alion.io/company/dtcpay","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Kuala Lumpur, Malaysia"],"countries":["MY"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":19000,"max_usd":44000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":1891},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"GDPR","optional":false},{"name":"ISO 27001","optional":false}],"status":"live","first_seen_at":"2026-10-06T04:58:15Z","employer_posted_date":null,"last_verified_at":"2026-10-06T04:58:15Z","board_verified":false,"closed_at":null,"days_open":7,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":7},"description":"Who are we \ndtcpay is a MAS licensed payment service provider that bridges traditional finance and digital assets. We enable businesses to accept and make payments in both fiat and digital currencies, delivering secure, efficient, and seamless payment experiences across borders. As we expand globally, we are shaping the future of digital payments. We are also recognised as one of Singapore's Top 10 Startups in the LinkedIn Top Startups 2025 list, a reflection of our momentum and the exciting journey ahead for our team.\n\nWe are looking for a Data Security and Compliance Engineer to support cybersecurity, data security, and personal data protection across our global business, with a strong focus on Singapore's regulatory requirements. You will turn requirements across jurisdictions into practical processes and technical controls, lead the development of data security policies and standard operating procedures (SOPs), and support risk assessments, ISO framework initiatives, and regulatory reviews. You will work closely with business, engineering, and operations teams to protect our systems and cross-border data assets.\n\nWhat You'll Do:\nMonitor cybersecurity, data security, and privacy requirements in Singapore and other jurisdictions where we operate. Identify local obligations and cross-border data risks, and produce gap analyses, risk assessments, and remediation plans.\nDevelop and maintain data security SOPs covering data inventory, classification, collection, storage, transfer, sharing, disclosure, masking, access control, disposal, and incident response. Drive adoption across teams, assess effectiveness, and track remediation to completion.\nConduct security and compliance reviews for key products and projects. Assess risks across jurisdictions, improve product compliance processes, and contribute to security requirements, architecture, and exception reviews for cross-border use cases.\nSupport management system development and certification efforts related to ISO 27001 and ISO 27701. Work with regulators, external assessors, and internal audit teams to prepare for reviews and resolve findings.\nBuild and operate the data security management framework, conduct cross-regional risk assessments, and use models such as DSMM to guide improvements. Coordinate data inventory and classification efforts across business and technical teams.\nDevelop data security controls suited to different business needs and jurisdictions. Advise on encryption, access control, and data masking, and support the evaluation and rollout of security tools.\nDeliver cybersecurity, data security, and privacy training to global teams. Work with internal and external partners to embed security requirements into everyday business processes.\n\nWhat We're Looking For: \nBachelor's degree in Computer Science, Information Security, Cybersecurity, or a related discipline.\nA minimum of 5 years of experience in information security, data security, privacy, or technology risk, including hands-on delivery of security controls or compliance programs.\nExperience building and implementing security or data compliance frameworks across regions, with knowledge of Singapore's information security and personal data protection requirements and how they differ from requirements elsewhere.\nFamiliarity with Singapore's Personal Data Protection Act (PDPA), ISO 27001, ISO 27701, GDPR, and the practical application of regulatory requirements through policies, processes, and controls.\nKnowledge of security controls such as encryption, access control, intrusion detection, vulnerability scanning, and data masking. Experience with data inventory and classification; familiarity with data security maturity models such as DSMM.\nPractical experience with cross-border data risk assessments and security incident response. Ability to write data security policies, standards, and SOPs and drive their adoption across regional teams.\nStrong communication, risk assessment, English documentation, and project delivery skills. Ability to work independently with regulators, auditors, and external assessors.\nProficiency in both English and Mandarin as you will need to work closely with Chinese vendors. \nThe role is based fully onsite, requiring your presence in the office.\n\nNice to Have:\nExperience in financial services or payments, cross-border business compliance, or implementing data security controls\nCertifications such as CISP, CISSP, or ISO 27001 Lead Auditor","description_format":"text","description_chars":4464,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security"],"lifecycle":[{"event":"open","at":"2026-10-06T04:58:15Z"}],"visa":[],"liveness":{"score":89,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.894,"p_room":1,"age_days":7,"expected_fill_days":22,"reasons":["seen:7","velocity","win:early"],"computed_at":"2026-10-13T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/dtcpay-data-security-and-compliance-engineer","json_url":"https://alion.io/job/dtcpay-data-security-and-compliance-engineer.json","meta":{"generated_at":"2026-10-13T15:03:26Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":23029,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":175075},"rest":"https://alion.io/mcp/rest/get_company?id=175075"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdtcpay-data-security-and-compliance-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdtcpay-data-security-and-compliance-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdtcpay-data-security-and-compliance-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/dtcpay-data-security-and-compliance-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdtcpay-data-security-and-compliance-engineer"}]}