Senior Consultant, Regional Information Security Office/Cyber Security Officer China

About the Position

We are seeking a Senior Consultant, Regional Information Security Officer for China to lead cybersecurity initiatives in APAC, ensuring compliance and security for NIQ's operations.

Responsibilities

China Certifications and Regulatory Compliance

• Lead the planning, maintenance, surveillance, and renewal of China-relevant security certifications, including ISO 27001 and MLPS where applicable.
• Interpret applicable China cybersecurity, data protection, and technology requirements and coordinate practical compliance actions with Legal, Privacy, Technology, and global Cybersecurity teams.
• Maintain clear evidence, risk, remediation, and stakeholder records to support audits, certifications, and regulatory inquiries.
• Drive timely resolution of security gaps and remediation commitments affecting China operations.

Customer and Commercial Security Engagement

• Serve as the APAC security partner for strategic customers, RFPs, security questionnaires, due diligence requests, and contract negotiations.
• Explain NIQ’s security posture, certifications, controls, and risk decisions in a clear, commercially practical manner.
• Partner with Sales, Client Success, Procurement, Legal, Product, and global Cybersecurity to address customer security requirements without creating avoidable business friction.
• Identify material contractual, customer, or delivery risks and drive them to an appropriate owner and decision.

Technology and M&A Security Initiatives

• Provide security leadership and business coordination for APAC technology initiatives, including Discover China deployments and other material regional solutions.
• Support cybersecurity due diligence, integration planning, and risk remediation for APAC M&A and strategic business changes, including Project Elland as applicable.
• Partner with Engineering, IT, Product, and Security Architecture to ensure local implementations align with NIQ security requirements and approved risk decisions.
• Maintain visibility of local assets, material risks, exceptions, and remediation progress, escalating issues with clear business impact.

APAC Regional Partnership

• Own the APAC regional Cybersecurity partnership, providing credible and responsive coverage to business and technology leaders across the region.
• Lead APAC Cyber Business Services activities, including customer security engagement, regional sales support, and tailored security communications.
• Mentor and develop the two APAC Cybersecurity team members, providing day-to-day coaching, work prioritization, and capability development while fostering strong connection to the global Cybersecurity organization.
• Build productive relationships across APAC and global teams; communicate risks, decisions, and progress clearly in Mandarin and English.
• Coordinate APAC security awareness and training activities, adapting global programs for regional needs and promoting secure working practices.

Requirements

Required

• Business-fluent Mandarin and English, with the ability to communicate effectively with executives, customers, auditors, and technical teams.
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Risk Management, Business, or a related field, or equivalent practical experience.
• Five or more years of experience in cybersecurity, technology risk, information security governance, compliance, audit, consulting, or a closely related discipline.
• Demonstrated experience supporting ISO 27001 or comparable information security management systems, including audit preparation, evidence collection, and remediation management.
• Working knowledge of China cybersecurity and data protection requirements, including MLPS and the China Cybersecurity Law, Data Security Law, and Personal Information Protection Law.
• Experience handling customer security reviews, RFPs, questionnaires, security attestations, or security-related contract requirements.
• Ability to manage competing priorities, influence without direct authority, and convert complex security requirements into clear, business-relevant actions.
• Demonstrated ability to mentor colleagues, build capability in a distributed team, and provide effective day-to-day guidance without relying on formal people-management authority.
• Strong judgment, ownership, written communication, and stakeholder-management skills.

Preferred

• CISSP, CISM, CISA, ISO 27001 Lead Implementer or Lead Auditor, or a comparable certification.
• Experience in a multinational, data-driven, technology, retail, analytics, or professional-services environment.
• Experience with M&A cybersecurity due diligence or post-acquisition integration.
• Experience partnering with Sales, Legal, Privacy, Procurement, Product, Engineering, or IT on complex business initiatives.
• Experience working across APAC and with globally distributed teams.

We Offer

• Flexible working environment
• Volunteer time off
• LinkedIn Learning
• Employee-Assistance-Program (EAP)

About the Company

NIQ is the world’s leading consumer intelligence company, delivering the most complete understanding of consumer buying behavior and revealing new pathways to growth. In 2023, NIQ combined with GfK, bringing together the two industry leaders with unparalleled global reach. With a holistic retail read and the most comprehensive consumer insights-delivered with advanced analytics through state-of-the-art platforms-NIQ delivers the Full View™. NIQ is an Advent International portfolio company with operations in 100+ markets, covering more than 90% of the world’s population.

For more information, visit NIQ.com

Our commitment to Diversity, Equity, and Inclusion

At NIQ, we are steadfast in our commitment to fostering an inclusive workplace that mirrors the rich diversity of the communities and markets we serve. We believe that embracing a wide range of perspectives drives innovation and excellence. All employment decisions at NIQ are made without regard to race, color, religion, sex (including pregnancy, sexual orientation, or gender identity), national origin, age, disability, genetic information, marital status, veteran status, or any other characteristic protected by applicable laws. We invite individuals who share our dedication to inclusivity and equity to join us in making a meaningful impact. To learn more about our ongoing efforts in diversity and inclusion, please visit the Diversity and Inclusion page.