Global InfoSec & Compliance Analyst — AI Data Governance

nahc.io; Hong Kong; On-site; HKD 420,000 - 660,000; Full time

Job summary

nahc.io is seeking an experienced Compliance and Information Security Analyst to safeguard its digital infrastructure and maintain top-tier international standards. You will oversee corporate compliance, audit readiness, data privacy frameworks, and threat mitigation across multi-region markets.

This role emphasizes vulnerability management, incident response, audits, and AI data governance in a fast-paced environment. Ideal for detail-oriented professionals driving proactive risk management.

Qualifications

• 2+ years in information security, IT compliance, or risk management.
• Experience with core compliance frameworks and standards, specifically ISO 27001, SOC reporting, and ISO 42001 (Artificial Intelligence Management Systems).
• Solid technical understanding of software development lifecycles, IT infrastructure, network architectures, vulnerability scanning, and structured incident response.
• Deep knowledge of global data privacy regulations (e.g., GDPR) and data governance frameworks.
• Industry security or compliance certifications (e.g., CISSP, CCEP, ISO Lead Implementer/Auditor, or equivalent) preferred.
• Excellent analytical, problem-solving, and communication skills to translate technical risks to stakeholders.

Responsibilities

• Own end-to-end vulnerability management—scheduling automated scans, prioritizing SAST/DAST findings, and driving remediation across application and infrastructure.
• Lead the complete incident response lifecycle, managing security event monitoring, containment, forensic mitigation, and root-cause reporting for executive leadership.
• Direct internal and external IT audits, maintaining certification programs across ISO 27001, ISO 42001 standards and SOC compliance.
• Develop, implement, and maintain data governance and privacy frameworks (e.g., GDPR) across global operating regions.
• Conduct continuous threat hunting using updated threat intelligence to proactively strengthen controls.
• Partner with engineering and operational squads to enforce security standards, evaluate risks in new initiatives, and conduct staff cybersecurity training.

Skills

Vulnerability management

Incident response

Security monitoring

Threat hunting

Data governance

Audit & compliance

Communication

Tools

ISO 27001

SOC reporting

ISO 42001

Job description

nahc.io is seeking an experienced Compliance and Information Security Analyst to safeguard its digital infrastructure and maintain top-tier international standards. You will oversee corporate compliance, audit readiness, data privacy frameworks, and threat mitigation across multi-region markets.

This role emphasizes vulnerability management, incident response, audits, and AI data governance in a fast-paced environment. Ideal for detail-oriented professionals driving proactive risk management.