Application Compliance Engineer

Summary

Apple's Wallet, Payments, and Commerce teams are redefining how people pay, access, and interact with financial services. Our work powers Apple Pay, Transit, Access, Car Key, and other Wallet experiences. This Shanghai-based role helps our China applications meet applicable security, privacy, and regulatory requirements through practical engineering controls and audit readiness.

Minimum Qualifications

Hands-on experience designing, testing, and documenting audit controls, with the ability to obtain technical evidence and verify sample completeness and accuracy. Solid understanding of application and security architectures, including identity and access management, encryption, logging, data flows, and cloud or enterprise infrastructure. Working knowledge of China technology and data compliance, including MLPS 2.0, applicable data localization requirements, and cross-border data transfer requirements; ability to work with Engineering, Legal and Privacy on their technical implementation. Experience applying compliance frameworks such as PCI DSS, SOX, or GDPR, and mapping requirements to application controls; payments, fintech, or banking experience is a plus. Ability to inspect system configurations, query logs, test controls, and maintain reproducible audit evidence while handling sensitive information appropriately. Practical scripting or programming skills, such as Python or Java, to support control validation, data analysis, or evidence automation. Ability to manage assigned projects and remediation workstreams, track dependencies, and escalate issues with clear technical context. Strong collaboration and communication skills across engineering, security, compliance, privacy, and audit teams in China and globally. Ability to work independently on defined deliverables, exercise sound judgment, and seek guidance as scope or risk increases.

Preferred Qualifications

Bachelor of Science in Computer Science, Information security, or 5+ years of equivalent, hands-on technology operations in large enterprise environments Knowledge and understanding of security and compliance systems and thorough understanding of security principles and technical architectures Significant experience working with large (the “Big 4”) external auditing firms, and certifications such as CISA or CISSP are a plus.

Description

Apple is seeking an exceptional Application Compliance Engineer to focus on the regulatory and compliance issues that shape and maintain our compliance in China. You will be responsible for strategy, interpretation, advocacy, and execution across China regulatory, compliance, and partner engineering work. You will work in close partnership with our colleagues in Legal and Government Affairs, who lead on legal interpretation and government relations, and with WPC China leadership, ensuring that regulatory and compliance strategy reflects Apple’s priorities and presence in the country. You will bring the engineering and business perspective that turns those efforts into workable outcomes, and you will bridge communication with our global teams design and delivery of audit controls and processes within the Wallet and Payment Engineering Team. This is a highly technical, hands-on role that requires experiences and expertise in regulatory and compliance within financial services and banking sectors, managing controls in complex environments. The successful candidate will drive the implementation and testing of appropriate controls and audit requirements with internal and external business units. Working with application engineering, infrastructure, security, privacy, and compliance teams, you will help design, implement, and test controls for China operations. Areas of focus include MLPS 2.0, applicable China data localization requirements, and cross-border data transfers. Legal and Government Affairs lead legal interpretation and government relations; you will contribute technical analysis and implementation support. You will use modern audit, development, and operations tools to maintain reliable audit evidence, identify control gaps, and coordinate remediation. In partnership with China and global teams, you will help embed compliance requirements into application design, delivery, and ongoing operations.

Responsibilities

Partner with engineering, infrastructure, security, privacy, and compliance teams to translate agreed requirements into technical controls and documented acceptance criteria. Support MLPS 2.0 assessment and audit readiness through technical scoping, control mapping, evidence collection, and control effectiveness testing. Identify control gaps, assess technical impact, and coordinate remediation with engineering owners; track milestones, retest fixes, and escalate unresolved risks to your manager. Prepare complete, accurate, and traceable audit evidence, including configurations, logs, access reviews, test results, and change records; support internal and external audits. Work with Engineering, Privacy and Legal to document data flows, support compliance assessments, and implement agreed controls for data localization and cross-border data transfers, including access, storage, and transfer safeguards. Validate controls such as least-privilege access, encryption, logging and monitoring, retention and deletion, and secure change management; automate repeatable evidence collection and testing where practical. Collaborate with China and global engineering and privacy teams to integrate compliance into design and releases, and communicate requirements, findings, and remediation progress clearly. Deliver assigned compliance projects under your manager’s direction, maintain clear documentation, and promote practical security and compliance awareness across partner teams.