InfoSec & Compliance Analyst (1.5 LoD)

Our client is One of the fastest-growing AI Product Companies in the APAC region. They are currently seeking an Information Security & Compliance Analyst to join their growing team. Responsibilities: - Own internal and external IT/compliance audits whilst maintaining industry certifications (e.g., ISO 27001) - Conduct ongoing risk assessments, oversee application security testing (SAST/DAST), and manage vulnerability scanning schedules - Build data governance frameworks, policies, and privacy standards (e.g., GDPR) - Monitor security alerts across cloud infrastructure and own the incident response lifecycle - Proactively look out for hidden threats using updated intelligence data - Work closely with engineering and business teams to monitor and mitigate potential issues Requirements: - 3+ years of proven experience in InfoSec, compliance or risk - Proven track record responding to internal incidents, whilst capable of managing vendors - Exposure with ISO 27001 or other industry-standard certifications - Sound knowledge of data governance frameworks and best practices - Good understanding of software development and IT infrastructure - Highly proactive and quality-driven, capable of working independently in a leaner start-up environment - Strong ability in stakeholder management, with fluent communication skills in English & Chinese - Related professional certifications (e.g. CISSP, CCEP) would be an added advantage [Please note: Personal data collected will be used for recruitment purposes only. Shortlisted applicants will be contacted for a confidential discussion by members of our team/company. Applicants not notified within eight weeks may consider their application unsuccessful.]