InfoSec & Compliance Analyst: ISO 27001, GDPR, IR

Not Another Headhunting Company; Hong Kong; Presencial; HKD 420.000 - 780.000; Jornada completa

Descripción de la vacante

Not Another Headhunting Company seeks an experienced Compliance and Information Security Analyst to safeguard its digital infrastructure across multi-region operations. The role leads vulnerability management, incident response, and audit readiness while driving data governance and GDPR compliance in a fast-paced technology environment.

Strong collaboration with engineering and security teams is essential to elevate enterprise controls.

Formación

• 2+ years in information security, IT compliance, or risk management in tech/cloud environments.
• Hands-on with ISO 27001, SOC reporting, and ISO 42001 knowledge.
• Strong understanding of SDLC, IT infra, networks, vulnerability management.
• Knowledge of GDPR and data governance frameworks.
• Certifications such as CISSP, CCEP, ISO Lead Implementer/Auditor preferred.
• Excellent analytical and communication skills to translate risks to stakeholders.

Responsabilidades

• Oversee vulnerability management and remediation across applications and infrastructure.
• Lead incident response lifecycle and executive reporting.
• Direct internal and external audits and maintain ISO/SOC certifications.
• Develop data governance and privacy frameworks (GDPR) across regions.
• Conduct threat hunting using updated intel to strengthen controls.
• Collaborate with engineering and operations to enforce security standards and train staff.

Conocimientos

InfoSec

Compliance

GDPR

Threat Hunting

Audits

Descripción del empleo

Not Another Headhunting Company seeks an experienced Compliance and Information Security Analyst to safeguard its digital infrastructure across multi-region operations. The role leads vulnerability management, incident response, and audit readiness while driving data governance and GDPR compliance in a fast-paced technology environment.

Strong collaboration with engineering and security teams is essential to elevate enterprise controls.