Director II, Infosec Compliance Monitoring

Infosec compliance team have mission identifying non-compliance by monitoring and assessing whether the employees and services across business for all geographies that handling confidential information such as sensitive information are complying with the regulations, certifications requirements and supporting the prompt remediate of identified risk factors.

Key Responsibilities:

• Establishment and implementation of information security compliance monitoring framework.
• Monitor and assess compliance with internal policies, industry standards, and regulatory requirements such as ISO 27001, NIST, GDPR).
• Conduct regular monitoring and risk assessments to identity vulnerabilities and ensure compliance.
• Collaborate with cross-functional teams to develop and implement compliance programs and initiatives.
• Analyze compliance-related data and generate reports for senior management and stakeholders.
• Stay updated on evolving regulations and compliance best practices to inform organizational strategy.
• Explain non-compliance issues to developer or stakeholders and make practical recommendations.
• Supporting to mitigate or remediate the information security compliance risks.

Basic Qualifications:

• Bachelor’s degree in information security, Computer Science, or a related field.

• More than 10 years of information security compliance audit experience
• High level understanding of enterprise security related requirements and regulations.
• High-level technical experience and understanding of IT infrastructure (Network, Security system, DB), Application Service and cloud environment, and micro service architecture.
• Experience with cloud service-based security compliance monitoring.
• Strong analytical and problem-solving skills.
• Familiarity with security frameworks and regulations (e.g., NIST, ISO 27001, K-ISMS-P).
• Ability to work independently and manage multiple priorities in a fast-paced environment.
• Excellent communication and interpersonal skills.

Preferred Qualifications:

• High level of experience and understanding of the AWS environment
• Security certificate holders (CISSP, CISA, CISM, SSCP and Other)
• Continuous willingness to learn about the latest security technologies and trends.