Remote-Friendly InfoSec & Compliance Analyst

SleekFlow; Hong Kong; On-site; HKD 320,000 - 520,000; Full time

Benefits offered by this job

13th-month salary

Stock options

Diverse international team

Birthday leave

Flexible work-from-home policy

Work From Anywhere

Job summary

SleekFlow is seeking an experienced Compliance and InfoSec Analyst to join our growing team in Hong Kong. The successful candidate will ensure adherence to legal standards and in-house policies, with a focus on audits, risk assessments, data governance, and incident response.

You will conduct audits, manage certifications (ISO 27001), perform risk assessments, oversee security testing, and collaborate with engineering and business squads to educate teams and improve security readiness globally.

Qualifications

• Audit & Certification Management: Conduct internal and external IT/compliance audits, maintain industry certifications (e.g., ISO 27001), and manage the documentation and enterprise compliance surveys requested by clients.
• Risk & Vulnerability Assessments: Perform continuous risk assessments, oversee application security testing (SAST/DAST), and manage vulnerability scanning schedules to proactively identify and mitigate hidden risks.
• Data Governance & Privacy: Develop and explore data governance frameworks, policies, and privacy standards (e.g., GDPR) across our existing and expanding global operating markets.
• Security Operations & Incident Response: Monitor daily security alerts across cloud infrastructure and own the incident response lifecycle, from containment and forensic mitigation to reporting for senior leadership.
• Threat Intelligence & Mitigation: Proactively hunt for hidden threats using updated intelligence data, improving control systems continuously to prevent compliance or security violations.
• Cross-Departmental Collaboration: Partner with engineering and business squads to monitor enforcement standards, assess risks in future business ventures, and design cybersecurity readiness training for global teams.

Responsibilities

• Audit & Certification Management: Conduct internal and external IT/compliance audits, maintain industry certifications (e.g., ISO 27001), and manage the documentation and enterprise compliance surveys requested by clients.
• Risk & Vulnerability Assessments: Perform continuous risk assessments, oversee application security testing (SAST/DAST), and manage vulnerability scanning schedules to proactively identify and mitigate hidden risks.
• Data Governance & Privacy: Develop and explore data governance frameworks, policies, and privacy standards (e.g., GDPR) across our existing and expanding global operating markets.
• Security Operations & Incident Response: Monitor daily security alerts across cloud infrastructure and own the incident response lifecycle, from containment and forensic mitigation to reporting for senior leadership.
• Threat Intelligence & Mitigation: Proactively hunt for hidden threats using updated intelligence data, improving control systems continuously to prevent compliance or security violations.
• Cross-Departmental Collaboration: Partner with engineering and business squads to monitor enforcement standards, assess risks in future business ventures, and design cybersecurity readiness training for global teams.

Skills

InfoSec

Compliance

Risk management

Audit experience

Data governance

Job description

SleekFlow is seeking an experienced Compliance and InfoSec Analyst to join our growing team in Hong Kong. The successful candidate will ensure adherence to legal standards and in-house policies, with a focus on audits, risk assessments, data governance, and incident response.

You will conduct audits, manage certifications (ISO 27001), perform risk assessments, oversee security testing, and collaborate with engineering and business squads to educate teams and improve security readiness globally.