InfoSec & Compliance Analyst (1.5 LoD)

Mavence Group; Hong Kong; On-site; HKD 480,000 - 720,000; Full time

Job summary

Our client, one of the fastest-growing AI product companies in the APAC region, is hiring an Information Security & Compliance Analyst to join their expanding team in Hong Kong.

In this role you will own internal and external IT/compliance audits, oversee risk assessments, manage vulnerability programs, build data governance policies (GDPR), monitor cloud security, and drive incident response with engineering and business teams.

Qualifications

• 3+ years of proven experience in InfoSec, compliance or risk.
• Proven track record responding to internal incidents and managing vendors.
• Exposure with ISO 27001 or other industry-standard certifications.
• Sound knowledge of data governance frameworks and best practices.
• Good understanding of software development and IT infrastructure.

Responsibilities

• Own internal and external IT/compliance audits whilst maintaining industry certifications (e.g., ISO 27001).
• Conduct ongoing risk assessments, oversee application security testing (SAST/DAST), and manage vulnerability scanning schedules.
• Build data governance frameworks, policies, and privacy standards (e.g., GDPR).
• Monitor security alerts across cloud infrastructure and own the incident response lifecycle.
• Proactively look out for hidden threats using updated intelligence data.
• Work closely with engineering and business teams to monitor and mitigate potential issues.

Skills

InfoSec

Compliance

Risk management

Job description

Our client is One of the fastest-growing AI Product Companies in the APAC region. They are currently seeking an Information Security & Compliance Analyst to join their growing team.

Responsibilities:

• Own internal and external IT/compliance audits whilst maintaining industry certifications (e.g., ISO 27001)
• Conduct ongoing risk assessments, oversee application security testing (SAST/DAST), and manage vulnerability scanning schedules
• Build data governance frameworks, policies, and privacy standards (e.g., GDPR)
• Monitor security alerts across cloud infrastructure and own the incident response lifecycle
• Proactively look out for hidden threats using updated intelligence data
• Work closely with engineering and business teams to monitor and mitigate potential issues

Requirements:

• 3+ years of proven experience in InfoSec, compliance or risk
• Proven track record responding to internal incidents, whilst capable of managing vendors
• Exposure with ISO 27001 or other industry-standard certifications
• Sound knowledge of data governance frameworks and best practices
• Good understanding of software development and IT infrastructure
• Highly proactive and quality-driven, capable of working independently in a leaner start-up environment
• Strong ability in stakeholder management, with fluent communication skills in English & Chinese
• Related professional certifications (e.g. CISSP, CCEP) would be an added advantage

[Please note: Personal data collected will be used for recruitment purposes only. Shortlisted applicants will be contacted for a confidential discussion by members of our team/company. Applicants not notified within eight weeks may consider their application unsuccessful.]