InfoSec & Compliance Analyst — ISO/GDPR, Bilingual EN/CN

Mavence Group; Hong Kong; On-site; HKD 480,000 - 720,000; Full time

Job summary

Our client, one of the fastest-growing AI product companies in the APAC region, is hiring an Information Security & Compliance Analyst to join their expanding team in Hong Kong.

In this role you will own internal and external IT/compliance audits, oversee risk assessments, manage vulnerability programs, build data governance policies (GDPR), monitor cloud security, and drive incident response with engineering and business teams.

Qualifications

• 3+ years of proven experience in InfoSec, compliance or risk.
• Proven track record responding to internal incidents and managing vendors.
• Exposure with ISO 27001 or other industry-standard certifications.
• Sound knowledge of data governance frameworks and best practices.
• Good understanding of software development and IT infrastructure.

Responsibilities

• Own internal and external IT/compliance audits whilst maintaining industry certifications (e.g., ISO 27001).
• Conduct ongoing risk assessments, oversee application security testing (SAST/DAST), and manage vulnerability scanning schedules.
• Build data governance frameworks, policies, and privacy standards (e.g., GDPR).
• Monitor security alerts across cloud infrastructure and own the incident response lifecycle.
• Proactively look out for hidden threats using updated intelligence data.
• Work closely with engineering and business teams to monitor and mitigate potential issues.

Skills

InfoSec

Compliance

Risk management

Job description

Our client, one of the fastest-growing AI product companies in the APAC region, is hiring an Information Security & Compliance Analyst to join their expanding team in Hong Kong.

In this role you will own internal and external IT/compliance audits, oversee risk assessments, manage vulnerability programs, build data governance policies (GDPR), monitor cloud security, and drive incident response with engineering and business teams.