Senior Analyst, Digital Trust and Resilience (Security Governance)
Core
Lead technology risk assessment and security compliance activities, coordinate IT audits for ISO/SOC 2 certifications, and drive AI automation for evidence collection.
Role type
Senior IC security governance analyst
Builds
Global security compliance frameworks and audit readiness
Domain
Information security, regulatory compliance, and AI operations
Deliverable
production ML models | dashboards & analysis | client delivery
Required skills
IT audit coordination, ISO/SOC 2 certification management, security awareness training execution, compliance gap identification, remediation management, control framework design, risk assessment, process improvement
Preferred skills
AI tooling for compliance automation, global regulatory knowledge (GDPR, DORA, MiCA), virtual assets/fintech experience, security certification management, third-party risk assessment
Technologies
ISO 27001, SOC 2, ISO 27701, ISO 22301, ISO 42001, SOC 1, PCI-DSS, SOX, cloud technologies, GDPR, DORA, CFTC, MiCA, HKMA, HK SFC
Responsibilities
Coordinate annual IT internal and external audits for ISO and SOC 2 certifications; run global security awareness and compliance training campaigns; automate evidence collection and compliance workflows; participate in security and privacy assessments; provide responses to third-party compliance enquiries; perform technical and third-party risk assessments; design and maintain control frameworks for international standards.
Seniority
Senior, hands-on IC