Job description

As the Security Engineering Program Manager for China Security & Infrastructure in ASE, you are a strategic leader and functional expert in the intersection of enterprise security, cloud infrastructure, and regulatory compliance at scale. While working directly with ASE engineering teams, legal counsel, and cross-functional partners, you will define and drive the overarching security and compliance strategy for all Apple services operating in mainland China. This will include navigating complex regulatory landscapes, driving large-scale infrastructure security improvements, and representing Apple's technical security posture to Chinese regulators and internal executives. You will be responsible for identifying, planning, and delivering critical security outcomes by autonomously engaging a broad set of internal and external stakeholders, balancing rigorous compliance requirements with Apple's high standards for privacy and user experience. 10+ years of experience in program management, with a significant focus on infrastructure security and compliance OR a combination of 5+ years program management with an additional 5+ years in a related field such as engineering leadership, security engineering or technical architecture. Regulatory Expertise: Deep expertise in China's regulatory landscape, specifically regarding cybersecurity, data localization, and privacy laws. External Representation: Proven track record of successfully interfacing with government regulators, auditors, and legal teams on complex technical security matters. Executive Presence: Exceptional communication skills with the ability to convey complex technical and regulatory information to both technical audiences and executive leadership with clarity, confidence, and alignment. Strategic Leadership: Experience leading large-scale, highly matrixed, cross-functional programs across global time zones, driving alignment from kick-off to successful deployment. Technical Proficiency: A solid understanding of cloud-native infrastructure, distributed systems, network architecture, and enterprise security controls to credibly partner with and challenge senior engineering teams. Risk Management Skills: Advanced ability to identify, assess, and prioritize systemic security and compliance risks, and drive the execution across multiple organizations to remediate them. Advanced degree in Computer Science, Information Security, Law, or a related field or equivalent professional experience Prior experience operating autonomously as an TPM or EPM in a massive-scale enterprise technology company partnering with Sr. Executives to deliver time-critical work. Experience with cloud security architectures and joint venture/partner-operated infrastructure models in China. Industry certifications in security, privacy, or compliance (e.g., CISSP, CISM, CIPP/A).

Requirements

Must-haves

Regulatory Expertise: Deep expertise in China's regulatory landscape, specifically regarding cybersecurity, data localization, and privacy laws.
External Representation: Proven track record of successfully interfacing with government regulators, auditors, and legal teams on complex technical security matters.
Executive Presence: Exceptional communication skills with the ability to convey complex technical and regulatory information to both technical audiences and executive leadership with clarity, confidence, and alignment.
Strategic Leadership: Experience leading large-scale, highly matrixed, cross-functional programs across global time zones, driving alignment from kick-off to successful deployment.
Technical Proficiency: A solid understanding of cloud-native infrastructure, distributed systems, network architecture, and enterprise security controls to credibly partner with and challenge senior engineering teams.
Risk Management Skills: Advanced ability to identify, assess, and prioritize systemic security and compliance risks, and drive the execution across multiple organizations to remediate them.
Advanced degree in Computer Science, Information Security, Law, or a related field or equivalent professional experience
Prior experience operating autonomously as an TPM or EPM in a massive-scale enterprise technology company partnering with Sr. Executives to deliver time-critical work.
Experience with cloud security architectures and joint venture/partner-operated infrastructure models in China.
Industry certifications in security, privacy, or compliance (e.g., CISSP, CISM, CIPP/A).

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Platform: apple
Effort: medium