Lead, Governance, Risk & Compliance (GRC) , Greater China & Mongolia
With thousands of hotels in over 100 countries and territories, Hilton offers countless opportunities to delight. From an open door to a welcoming smile and an exceptional experience, we offer the millions of travellers who stay with us every year a welcome they will never forget. In addition to our flagship brand, Hilton Hotels & Resorts, the family of brands includes Waldorf Astoria, LXR, Conrad, Canopy, Curio Collection, Double Tree, Hilton Garden Inn, Hampton and many others.
If you appreciate the impact global travel can have on the world, you may be just the person we are looking for to work as a Hilton Team Member. Because it’s with Hilton where we never forget the reason we're here: to delight our guests, Team Members, and owners alike.
From smartphone capabilities like Digital Key to connected rooms that allow for integrated entertainment, temperature, and lighting controls, Hilton’s Global Technology team is responsible for creating the hospitality experience of the future – for our guests, owners, and Team Members. Through innovative technology development and deployment, this team ensures Hilton has the technology needed to support our continued global growth while remaining at the forefront of hospitality technology innovation.
Position Statement
With Hilton’s rapid growth throughout APAC, we need to ensure that Hilton has strong network security and customer data protection cybersecurity compliance across multiple information systems. This position is responsible for leading Hilton’s China Customer Data Platform (CDP) compliance programs.
The position will play a critical role in ensuring Hilton’s China CDP technologies comply with China's Cyber Security regulations and will contribute to Hilton’s GRC ( Governance, Risk & Compliance) work in China.
Summary
This position will directly report to the Senior Manager of IT Audit Security Compliance, and work closely with the China CDP program team, Global Information Security team, Certification Bureaus, and relevant regulators. In this role, you will need to ensure that the information systems comply with all relevant information security laws and regulations in China.

What will I be doing?
As the Lead GRC – Greater China & Mongolia, you will be responsible for performing the following tasks to the highest standards:

• Obtain PIPL/MLPS certification, conduct personal data compliance audit, and interface with China regulators for the China CDP program.

• Manage compliance work related to China Cyber regulations and maintain the relationship with the China Certification Bureaus.

• Facilitate remediation and provide insights and consulting suggestions to the China CDP team.

• Ensure adherence to China Cybersecurity compliance and Hilton Information Security Policies and Standards.

• Develop and deliver regional information security compliance training and communication.

• Share best practices across teams and develop and enhance cyber compliance tools, templates, checklists, and methodologies.

Direct Reports (if any)
What are we looking for?
A Lead GRC – Greater China & Mongolia, serving Hilton Brands is always working on behalf of our Guests and working with other Team Members. To successfully fill this role, you should maintain the attitude, behaviors, skills, and values that follow:

• Minimum Education: BA/BS/Bachelor's Degree in Computer Science, Information Security, or related disciplines.

• Minimum Years of Experience: 7-10 years of experience in cybersecurity and security compliance work.

• Familiar with laws and regulations related to network security and data security in China, such as Cybersecurity Law, Date Security Law, Personal Information Protection Law, and MLPS.

• Experience leading MLPS or PIPL compliance projects.

• Excellent bilingual (Mandarin & English) business communication and writing skills are required.

• Working independently, autonomously, and collaboratively.

• CISSP, CISA, CISM, PCI, CIPP, CIPM, or any of the equivalent international cybersecurity certifications will be a plus to this position.

• Cybersecurity or compliance experiences in hotel IT-related experience will be a plus.

• Proficient in Microsoft Word, Power Point, and Excel.

• Ability to travel as required (up to 5%).

What is it like working for Hilton?
Hilton is the world’s leading global hospitality company, spanning the lodging sector from luxurious full-service hotels and resorts to extended-stay suites and mid-priced hotels. For nearly a century, Hilton has offered business and leisure travellers the finest in accommodations, service, amenities, and value. Hilton is dedicated to continuing its tradition of providing exceptional guest experiences across its global brands. Our vision to fill the earth with the light and warmth of hospitality unites us as a team to create remarkable hospitality experiences around the world every single day. And, our amazing Team Members are at the heart of it all!