Information Security Engineer – GDPR & Cybersecurity

About the role

J&T Express is expanding its European logistics network and needs an experienced Information Security Engineer to elevate its security posture, ensure GDPR compliance, and support cyber‑security operations across the organization.

Key responsibilities

• Develop and maintain information security policies, standards, and procedures.
• Lead GDPR compliance initiatives, including DPIAs, data‑processing records, breach handling, and data‑subject rights.
• Monitor, detect, and respond to security incidents using SIEM, IDS/IPS, EDR and related tools.
• Manage vulnerability scanning, penetration testing, and security hardening activities.
• Support audits, compliance checks, and security risk assessments.
• Deliver security awareness and GDPR training for employees.
• Collaborate with Legal, IT, Operations and external partners.

Required profile

• Bachelor’s degree or higher.
• 5+ years of experience in information security, cyber security or compliance.
• Strong knowledge of GDPR and security frameworks such as ISO 27001 or NIST.
• Experience in logistics or express delivery is a plus.
• Excellent communication skills in English and Chinese; German is a plus.

Required skills

• SIEM tools: Splunk, QRadar.
• Vulnerability scanners: Nessus, OpenVAS.
• Endpoint protection: CrowdStrike, SentinelOne.
• Application testing: Burp Suite, Metasploit.
• Identity & Access Management, VPN, firewall policies, endpoint security.

What we offer

• Fast‑growing international logistics environment.
• High‑impact role with strong ownership.
• Dynamic, international team.
• Opportunity to shape security and compliance standards across Europe.