InfoSec Compliance Officer

We’re partnering with a leading global financial technology company to hire an Information Security Compliance Officer. This role will cover Singapore and Australia, acting as the primary local security adviser and helping implement and maintain robust cybersecurity and compliance practices in line with global policies and local regulations.

Responsibilities

• Serve as the main local security contact for offices in Singapore and Australia.
• Advise on the implementation of information security policies and procedures tailored for local regulatory requirements.
• Act as an escalation point for security issues, incidents, and inquiries from local offices.
• Provide regular reporting on cyber security status to local management.
• Offer cybersecurity guidance and best practices to local teams.
• Monitor outsourcing arrangements, ensuring service providers meet agreed KPIs/SLAs; escalate or address issues as needed.
• Identify non-compliance risks or improvement areas and help drive standard solutions.
• Collaborate with global cybersecurity teams to ensure local offices meet technical and regulatory expectations.
• Support incident management, assisting investigations and ensuring timely resolution.
• Participate in industry forums, client engagements, and conferences to represent the company's cybersecurity program.
• Maintain personal compliance training records and fulfill any additional tasks assigned by management.

Requirements

• Bachelor’s degree in Computer Science, Information Systems, or related field.
• Professional certifications: CISSP, CISM, or CISA (must have).
• 5+ years of IT/IS experience, including audit or compliance experience with regulated entities.
• Solid knowledge of regulatory frameworks and standards such as MAS TRMG, Cyber Hygiene, ISO27001, SOC2, NIST, PCI DSS, PDPA/GDPR.
• Strong communication skills, able to explain technical issues clearly to diverse stakeholders.
• Comfortable working both independently and within a matrix/global structure.
• Demonstrated understanding of information security risk and governance.