Role Overview
The Senior Consultant, Regional Information Security Office/Cyber Security Officer China is a China-based regional Cybersecurity leader for all of APAC and the primary Cybersecurity liaison for NIQ China. The role serves as a trusted advisor to APAC business and technology leaders, translating regional regulatory, customer, and business needs into practical security outcomes and connecting APAC stakeholders with NIQ’s global Cybersecurity organization. The position owns China cybersecurity certification and regulatory activities; leads APAC customer, RFP, and commercial security engagement; and provides cybersecurity leadership for regional technology and M&A initiatives.
Key Responsibilities
China certifications and regulatory compliance
- Lead the planning, maintenance, surveillance, and renewal of China-relevant security certifications, including ISO 27001 and MLPS where applicable.
- Interpret applicable China cybersecurity, data protection, and technology requirements and coordinate practical compliance actions with Legal, Privacy, Technology, and global Cybersecurity teams.
- Maintain clear evidence, risk, remediation, and stakeholder records to support audits, certifications, and regulatory inquiries.
- Drive timely resolution of security gaps and remediation commitments affecting China operations.
Customer and commercial security engagement
- Serve as the APAC security partner for strategic customers, RFPs, security questionnaires, due diligence requests, and contract negotiations.
- Explain NIQ’s security posture, certifications, controls, and risk decisions in a clear, commercially practical manner.
- Partner with Sales, Client Success, Procurement, Legal, Product, and global Cybersecurity to address customer security requirements without creating avoidable business friction.
- Identify material contractual, customer, or delivery risks and drive them to an appropriate owner and decision.
Technology and M&A security initiatives
- Provide security leadership and business coordination for APAC technology initiatives, including Discover China deployments and other material regional solutions.
- Support cybersecurity due diligence, integration planning, and risk remediation for APAC M&A and strategic business changes, including Project Elland as applicable.
- Partner with Engineering, IT, Product, and Security Architecture to ensure local implementations align with NIQ security requirements and approved risk decisions.
- Maintain visibility of local assets, material risks, exceptions, and remediation progress, escalating issues with clear business impact.
APAC regional partnership
- Own the APAC regional Cybersecurity partnership, providing credible and responsive coverage to business and technology leaders across the region.
- Lead APAC Cyber Business Services activities, including customer security engagement, regional sales support, and tailored security communications.
- Mentor and develop the two APAC Cybersecurity team members, providing day-to-day coaching, work prioritization, and capability development while fostering strong connection to the global Cybersecurity organization.
- Build productive relationships across APAC and global teams; communicate risks, decisions, and progress clearly in Mandarin and English.
- Coordinate APAC security awareness and training activities, adapting global programs for regional needs and promoting secure working practices.
Required
- Business-fluent Mandarin and English, with the ability to communicate effectively with executives, customers, auditors, and technical teams.
- Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Risk Management, Business, or a related field, or equivalent practical experience.
- Five or more years of experience in cybersecurity, technology risk, information security governance, compliance, audit, consulting, or a closely related discipline.
- Demonstrated experience supporting ISO 27001 or comparable information security management systems, including audit preparation, evidence collection, and remediation management.
- Working knowledge of China cybersecurity and data protection requirements, including MLPS and the China Cybersecurity Law, Data Security Law, and Personal Information Protection Law.
- Experience handling customer security reviews, RFPs, questionnaires, security attestations, or security-related contract requirements.
- Ability to manage competing priorities, influence without direct authority, and convert complex security requirements into clear, business-relevant actions.
- Demonstrated ability to mentor colleagues, build capability in a distributed team, and provide effective day-to-day guidance without relying on formal people-management authority.
- Strong judgment, ownership, written communication, and stakeholder-management skills.
Preferred
- CISSP, CISM, CISA, ISO 27001 Lead Implementer or Lead Auditor, or a comparable certification.
- Experience in a multinational, data-driven, technology, retail, analytics, or professional-services environment.
- Experience with M&A cybersecurity due diligence or post-acquisition integration.
- Experience partnering with Sales, Legal, Privacy, Procurement, Product, Engineering, or IT on complex business initiatives.
- Experience working across APAC and with globally distributed teams.
Our Benefits
- Flexible working environment
- Volunteer time off
- LinkedIn Learning
- Employee-Assistance-Program (EAP)
NIQ may utilize artificial intelligence (AI) tools at various stages of the recruitment process, including résumé screening, candidate assessments, interview scheduling, job matching, communication support, and certain administrative tasks that help streamline workflows. These tools are intended to improve efficiency and support fair and consistent evaluation based on job-related criteria. All use of AI is governed by NIQ’s principles of fairness, transparency, human oversight, and inclusion. Final hiring decisions are made exclusively by humans. NIQ regularly reviews its AI tools to help mitigate bias and ensure compliance with applicable laws and regulations. If you have questions, require accommodations, or wish to request human review were permitted by law, please contact your local HR representative. For more information, please visit NIQ’s AI Safety Policies and Guiding Principles: https://nielseniq.com/global/en/info/niqs-ai-safety-policies/
About NIQ
NIQ is the world’s leading consumer intelligence company, delivering the most complete understanding of consumer buying behavior and revealing new pathways to growth. In 2023, NIQ combined with GfK, bringing together the two industry leaders with unparalleled global reach. With a holistic retail read and the most comprehensive consumer insights—delivered with advanced analytics through state-of-the-art platforms—NIQ delivers the Full View™. NIQ is an Advent International portfolio company with operations in 100+ markets, covering more than 90% of the world’s population.
For more information, visit NIQ.com
Want to keep up with our latest updates?
Follow us on: LinkedIn | Instagram | Twitter | Facebook
Our commitment to Diversity, Equity, and Inclusion
At NIQ, we are steadfast in our commitment to fostering an inclusive workplace that mirrors the rich diversity of the communities and markets we serve. We believe that embracing a wide range of perspectives drives innovation and excellence. All employment decisions at NIQ are made without regard to race, color, religion, sex (including pregnancy, sexual orientation, or gender identity), national origin, age, disability, genetic information, marital status, veteran status, or any other characteristic protected by applicable laws. We invite individuals who share our dedication to inclusivity and equity to join us in making a meaningful impact. To learn more about our ongoing efforts in diversity and inclusion, please visit the https://nielseniq.com/global/en/news-center/diversity-inclusion