Application Compliance Engineer

Apple's Wallet, Payments, and Commerce teams are redefining how people pay, access, and interact with financial services. Our work powers Apple Pay, Transit, Access, Car Key, and other Wallet experiences. This Shanghai-based role helps our China applications meet applicable security, privacy, and regulatory requirements through practical engineering controls and audit readiness.

Apple is seeking an exceptional Application Compliance Engineer to focus on the regulatory and compliance issues that shape and maintain our compliance in China. You will be responsible for strategy, interpretation, advocacy, and execution across China regulatory, compliance, and partner engineering work.

You will work in close partnership with our colleagues in Legal and Government Affairs, who lead on legal interpretation and government relations, and with WPC China leadership, ensuring that regulatory and compliance strategy reflects Apple’s priorities and presence in the country.

You will bring the engineering and business perspective that turns those efforts into workable outcomes, and you will bridge communication with our global teams design and delivery of audit controls and processes within the Wallet and Payment Engineering Team.

This is a highly technical, hands-on role that requires experiences and expertise in regulatory and compliance within financial services and banking sectors, managing controls in complex environments. The successful candidate will drive the implementation and testing of appropriate controls and audit requirements with internal and external business units.

Working with application engineering, infrastructure, security, privacy, and compliance teams, you will help design, implement, and test controls for China operations. Areas of focus include MLPS 2.0, the Personal Information Protection Law (PIPL), applicable China data localization requirements, and cross-border data transfers.

Legal and Government Affairs lead legal interpretation and government relations; you will contribute technical analysis and implementation support.

You will use modern audit, development, and operations tools to maintain reliable audit evidence, identify control gaps, and coordinate remediation. In partnership with China and global teams, you will help embed compliance requirements into application design, delivery, and ongoing operations.

▪ Hands-on experience designing, testing, and documenting audit controls, with the ability to obtain technical evidence and verify sample completeness and accuracy. ▪ Solid understanding of application and security architectures, including identity and access management, encryption, logging, data flows, and cloud or enterprise infrastructure. ▪ Working knowledge of China technology and data compliance, including MLPS 2.0, PIPL, applicable data localization requirements, and cross-border data transfer requirements; ability to work with Engineering, Legal and Privacy on their technical implementation. ▪ Experience applying compliance frameworks such as PCI DSS, SOX, or GDPR, and mapping requirements to application controls; payments, fintech, or banking experience is a plus. ▪ Ability to inspect system configurations, query logs, test controls, and maintain reproducible audit evidence while handling sensitive information appropriately. ▪ Practical scripting or programming skills, such as Python or Java, to support control validation, data analysis, or evidence automation. ▪ Ability to manage assigned projects and remediation workstreams, track dependencies, and escalate issues with clear technical context. ▪ Strong collaboration and communication skills across engineering, security, compliance, privacy, and audit teams in China and globally. ▪ Ability to work independently on defined deliverables, exercise sound judgment, and seek guidance as scope or risk increases.

•Bachelor of Science in Computer Science, Information security, or 5+ years of equivalent, hands-on technology operations in large enterprise environments •Knowledge and understanding of security and compliance systems and thorough understanding of security principles and technical architectures •Significant experience working with large (the “Big 4”) external auditing firms, and certifications such as CISA or CISSP are a plus.