Compliance and Information Security Analyst

About SleekFlow

Join SleekFlow, a thriving SaaS startup that is experiencing rapid growth thanks to the support of renowned investors like Tiger Global and Gobi Partners. Our mission is to shape the future of communication by empowering companies to center all their workflows around meaningful conversations, and as a member of our team, you will have the opportunity to thrive alongside the company through equity options. If you're ready to take your career to the next level and assume a larger role, we look forward to meeting you!

At SleekFlow, we have developed an AI-Powered Omnichannel Conversation Suite that drives conversions through conversations. Our platform seamlessly integrates with popular channels such as WhatsApp, Messenger, Instagram, WeChat, Email, and more, providing comprehensive communication solutions. With our customer engagement platform, both small merchants and large enterprises can automate growth by enhancing productivity across their sales, marketing, and support teams.

As we expand into emerging markets, we seek adventurous, diverse, and passionate individuals to join us on this exciting journey. Join our team and grow your career with SleekFlow!

Junior to Mid level

Location: Hong Kong

Overview

We are seeking an experienced Compliance and InfoSec Analyst to join our growing team. The successful candidate will be responsible for ensuring that our company adheres to legal standards and in-house policies. This person will be tasked with enforcing regulations in all aspects and levels of business as well as provide guidance on compliance matters. This person must have a good understanding of computer networks and systems, and must be able to identify potential security risks and develop strategies for mitigating those risks. A keen eye for detail and a commitment to upholding the highest standards of confidentiality and integrity are essential for success in this role.

Responsibilities
• Conduct and coordinate internal and external compliance audits, ensuring that the company meets the requirements set by clients and regulatory bodies.
• Conduct regular risk assessments to evaluate the effectiveness of existing controls and identify areas for improvement.
• Fill out compliance surveys from enterprises meticulously, providing accurate and current data.
• Develop a comprehensive data governance framework, including policies, standards, and procedures to ensure data integrity and quality.
• Explore and understand the data governance frameworks and policies in existing and new markets that the company has operations in
• Conduct IT security assessment, IT control measurements, policies review, penetration testing, IT audit etc.
• Maintain certifications such as ISO 27001, including managing all necessary documentation and facilitating regular audits.
• Develop and oversee control systems to prevent or deal with violations of legal guidelines and internal policies.
• Evaluate the efficiency of controls and improve them continuously.
• Revise procedures, reports, etc. periodically to identify hidden risks or non-conformity issues.
• Collaborate with other departments to monitor the enforcement of standards and regulations.
• Assess the business’s future ventures to identify possible compliance risks.
• Prepare reports for senior management and external regulatory bodies as appropriate.

Qualifications
• A minimum of 2 years of proven experience in an info sec, compliance or risk manager role.
• Good knowledge of legal requirements and procedures.
• Brilliant oral and written communication skills.
• Highly-analytical with strong attention to detail.
• Professional certification related to compliance (e.g., Certified Compliance & Ethics Professional (CCEP), Certified Information Systems Security Professional (CISSP)).
• Experience with ISO 27001 and other industry-standard certifications.
• Solid understanding of data governance frameworks and best practices, including data classification, data quality management, and data privacy regulations (e.g. GDPR) across markets that the company has operations in.
• Proficiency in risk management and industry-specific security standards.
• Technical background with an understanding of software development and IT infrastructure.

What We Offer
• Attractive compensation package including a 13th-month salary
• Stock options in a rapidly-growing startup
• A fun, diverse, and international team culture
• Comprehensive group medical insurance
• Allowances for transportation, snacks, and team lunches
• Paid leave on your birthday
• Flexible work-from-home policy
• Continuous and rigorous training from experienced team leads
• Opportunities for professional development and career growth
• Access to the latest tools and technologies in data engineering
• Recognition and awards for outstanding performance

Confidence can sometimes hold us back from applying for a job. But we'll let you in on a secret: there's no such thing as a 'perfect' candidate.

SleekFlow is a place where everyone can grow. So however you identify and whatever background you bring with you, please apply if this is a role that would make you excited to come into work every day.