InfoSec & Compliance Analyst (1.5 LoD)

Our client is One of the fastest-growing AI Product Companies in the APAC region. They are currently seeking an Information Security & Compliance Analyst to join their growing team.Responsibilities:Own internal and external IT/compliance audits whilst maintaining industry certifications (e.g., ISO 27001)Conduct ongoing risk assessments, oversee application security testing (SAST/DAST), and manage vulnerability scanning schedulesBuild data governance frameworks, policies, and privacy standards (e.g., GDPR)Monitor security alerts across cloud infrastructure and own the incident response lifecycleProactively look out for hidden threats using updated intelligence dataWork closely with engineering and business teams to monitor and mitigate potential issuesRequirements:3+ years of proven experience in InfoSec, compliance or riskProven track record responding to internal incidents, whilst capable of managing vendorsExposure with ISO 27001 or other industry-standard certificationsSound knowledge of data governance frameworks and best practicesGood understanding of software development and IT infrastructureHighly proactive and quality-driven, capable of working independently in a leaner start-up environmentStrong ability in stakeholder management, with fluent communication skills in English & ChineseRelated professional certifications (e.g. CISSP, CCEP) would be an added advantage[Please note: Personal data collected will be used for recruitment purposes only. Shortlisted applicants will be contacted for a confidential discussion by members of our team/company. Applicants not notified within eight weeks may consider their application unsuccessful.]