Sr Manager, Information Security; Bilingual in Chinese

GENERAL FUNCTION / SUMMARY

The Sr Manager, Information Security leads the company's global IT infrastructure, cybersecurity, and US-based vendor and services management. Reporting to the CTO, this role owns the design, implementation and operations of a secure, reliable, and scalable technology environment that supports cross-border operations and business growth.

The role collaborates closely with Product, Software Development, QA, and AI & Automation teams to align infrastructure and security with modern development and delivery practices.

* Preferred

Work Location:

Monrovia (3–4 days/week) and Diamond Bar (1–2 days/week)

• Design, implement, and operate scalable, resilient IT infrastructure across cloud, network, and enterprise systems supporting global operations
• Ensure high availability, performance, and reliability of all technology platforms and services
• Direct IT service delivery and support operations, overseeing the IT Service team and escalation tiers
• Establish infrastructure standards and roadmaps that scale with increasing system and user demands

• Develop and execute the enterprise cybersecurity policies, and controls protecting company data and systems
• Implement and operate security practices aligned with U.S. regulatory requirements (e.g., CCPA, SEC, FINRA)
• Drive compliance readiness (e.g., NIST, ISO 27001, SOC
  2) in partnership with Legal and business stakeholders
• Own risk assessments, vulnerability management, incident response, and data protection frameworks end to end
• Ensure audit readiness and continuous improvement of the company's security posture

• Manage US-based IT vendors and partner services across infrastructure, security, and enterprise systems
• Evaluate and select technology partners; negotiate and oversee contracts, SLAs, and renewals
• Monitor vendor performance, cost efficiency, and alignment with company standards and compliance requirements

• Establish and enforce IT governance frameworks, including policies, standards, and operational procedures
• Implement disciplined change management, system lifecycle management, and operational best practices
• Define and track key performance indicators across infrastructure, security, and IT operations

• Partner with Product, Software Development, QA, and AI & Automation teams within the CTO's organization to align infrastructure and security with development and delivery needs
• Act as a bridge between technical and non-technical stakeholders to drive clarity, accountability, and results

• Lead and develop the IT Service team, building strong capabilities in infrastructure, service delivery, and cybersecurity
• Provide coaching, performance management, and succession planning for IT service team members
• Foster a culture of accountability, continuous improvement, and cross-functional collaboration

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field, master's preferred
• At least 10 years of progressive IT or Cybersecurity experience, including 5+ years in leadership roles.
• Bilingual proficiency in English and Chinese
• Strong hands-on expertise in cybersecurity and IT infrastructure (cloud, network, enterprise systems)
• Proven experience establishing IT governance, security frameworks, and operational standards
• Demonstrated experience collaborating cross-functionally with Product, Software Development, and QA teams
• Strong vendor management and stakeholder engagement skills

• Holding active cybersecurity certificates, e.g. CISSP, CISA, Security+
• Experience in financial…