Principal Security Engineering Program Manager China Security & Infrastructure, Apple Services Engineering

Apple Services Engineering (ASE) team is one of the most exciting examples of Apples long-held passion for combining art and technology! We enable Apples apps and services and we do it on an extensive scale to hundreds of millions of customers in over 35 languages to more than 150 countries. nnThe ASE Security team is seeking a highly experienced Security Engineering Program Manager to lead our China Security and Infrastructure compliance initiatives. Within ASE you will work with and influence colleagues across Apple interface with Chinese regulators and advise Apple leadership to ensure our services meet stringent security and regulatory objectives in mainland China. As our work is integral through the entire software and infrastructure stack you will have the opportunity to work with a wide variety of engineering legal privacy and government affairs teams across Apple. We cultivate strong relationships build trust and influence without direct authority. We communicate openly and clearly collaborate enthusiastically and value a diverse culture of healthy debate. Do these points resonate with you If so we want to talk!

As the Security Engineering Program Manager for China Security u0026 Infrastructure in ASE you are a strategic leader and functional expert in the intersection of enterprise security cloud infrastructure and regulatory compliance at scale. While working directly with ASE engineering teams legal counsel and cross-functional partners you will define and drive the overarching security and compliance strategy for all Apple services operating in mainland China. This will include navigating complex regulatory landscapes driving large-scale infrastructure security improvements and representing Apples technical security posture to Chinese regulators and internal executives. You will be responsible for identifying planning and delivering critical security outcomes by autonomously engaging a broad set of internal and external stakeholders balancing rigorous compliance requirements with Apples high standards for privacy and user experience.

Define and operationalize the strategic roadmap for China security and infrastructure compliance across all Apple as the primary technical program leader leading programs and efforts to work with Chinese regulators legal teams and government affairs to ensure technical alignment with local cybersecurity and data privacy laws (e.g. MLPS PIPL Etc ).nAdvise and present to Apple executive leadership on regulatory risks compliance posture and strategic infrastructure highly complex cross-functional dependencies risks and changes effectively by optimizing scope schedule and resources across multiple global engineering a key part in shaping technical architecture and design collaborating closely with senior engineers and architects to ensure infrastructure in mainland China meets both Apples security bar and local regulatory through ambiguity influencing peers stakeholders and executives to build consensus and drive critical initiatives without direct and own comprehensive communication plans to effectively and proactively communicate program status regulatory shifts and systemic risks to stakeholders at all data and deep technical insights to drive strategic decisions prioritization and resource allocation at the highest levels of the company.n

10 years of experience in program management with a significant focus on infrastructure security and compliance OR a combination of 5 years program management with an additional 5 years in a related field such as engineering leadership security engineering or technical Expertise: Deep expertise in Chinas regulatory landscape specifically regarding cybersecurity data localization and privacy Representation: Proven track record of successfully interfacing with government regulators auditors and legal teams on complex technical security Presence: Exceptional communication skills with the ability to convey complex technical and regulatory information to both technical audiences and executive leadership with clarity confidence and Leadership: Experience leading large-scale highly matrixed cross-functional programs across global time zones driving alignment from kick-off to successful Proficiency: A solid understanding of cloud-native infrastructure distributed systems network architecture and enterprise security controls to credibly partner with and challenge senior engineering Management Skills: Advanced ability to identify assess and prioritize systemic security and compliance risks and drive the execution across multiple organizations to remediate them.n

Advanced degree in Computer Science Information Security Law or a related field or equivalent professional experiencenPrior experience operating autonomously as an TPM or EPM in a massive-scale enterprise technology company partnering with Sr. Executives to deliver time-critical work. nExperience with cloud security architectures and joint venture/partner-operated infrastructure models in certifications in security privacy or compliance (e.g. CISSP CISM CIPP/A).n