Senior Information Security Compliance Analyst

Monks
Kuala Lumpur, Malaysia
On-site

Who this role is best for

Geared toward candidates with 5+ years in InfoSec and experience with global compliance frameworks, comfortable with leading APAC region ISMS alignment and third-party risk assessments.

Best fit for

  • Candidates with 5+ years in InfoSec and a track record in global standards like ISO 27001/2 and SOC2
    — “Minimum of 5 years of experience in InfoSec related positions.”
  • Professionals adept at cross-functional collaboration and managing stakeholder expectations
    — “Working closely with stakeholders from various departments, forging strong partnerships.”
  • Individuals who can bridge technical and non-technical audiences with clear communication
    — “Ability to confidently present findings to those with either a technical or non-technical background.”

Things to consider

  • The role demands a high level of self-direction and proactive problem-solving
    — “Self-directed, resourceful, and a critical thinker with attention-to-detail and proactive problem-solving skills.”
  • Candidates must be ready to take initiative in self-improvement and suggest process improvements
    — “Ready to learn new contents both from others or self-learned.”

How to stand out

  • Highlight experience with technical and administrative controls across multiple domains
    — “Understand about technical and administrative controls in the different areas: networking, operations, access management, SSDLC, cloud security, end-point protection, physical security, third party risk assessment, organization security and legal compliance.”
  • Demonstrate leadership in aligning regional compliance with global ISMS frameworks
    — “Lead the alignment to the global ISMS (based on ISO27001:2022) over the APAC region.”
  • Showcase ability to coordinate assessments with third parties and manage audit requirements
    — “Coordinate the information security assessments with 3rd parties (clients, suppliers).”
  • Emphasize your capability to evaluate and report on compliance status of processes and technology
    — “Report the compliance status of processes and technology in the region.”
  • Demonstrate initiative in researching and implementing technologies to improve security baseline
    — “Investigate on technologies that could improve the security baseline and the compliance.”
Pace · SteadyCollaboration · HighAutonomy · MediumDecision Impact · Company

Derived from job-description analysis by Serendipath's career intelligence engine.

What success looks like

  • compliance with security frameworks
  • reduced risk
  • successful audits
Typical background
information securitycompliancerisk management

Skills & requirements

Required

Risk AssessmentCompliance ManagementSecurity ControlsThird-party Risk AssessmentInformation SecurityISO 27001SOC 2Nist-800Security FrameworksAudits

Preferred

DLPEnd-point ProtectionNetwork SecuritySecurity And Vulnerabilities Assessment

Stack & domain

ISMS AlignmentCompliance EffortsSecurity Frameworks EvaluationCompliance Status ReportingRisk IdentificationSecurity Measures DefinitionTechnical Controls EvaluationInformation Security AssessmentsAwareness Material DevelopmentInternal And External Audits CoordinationTechnology InvestigationDLPEnd-point ProtectionNetwork SecuritySecurity And Vulnerabilities AssessmentMentorshipTeam AssistanceProfessional GrowthCollaborationPartnership BuildingStakeholder CommunicationPresentationTechnical Findings PresentationTeam EmpowermentProfessional Growth FosteringInformation SecurityComplianceISO 27001SOC 2Nist-800

About the role

Original posting from Monks

Please note that we will never request payment or bank account information at any stage of the recruitment process. As we continue to grow our teams, we urge you to be cautious of fraudulent job postings or recruitment activities that misuse our company name and information. Please protect your personal information during any recruitment process. While Monks may contact potential candidates via LinkedIn, all applications must be submitted through our official website (monks.com/careers).

As a Senior Information Security Compliance Analyst, your core responsibility will be to ensure the organization's strict adherence to all pertinent regulations and standards. Your critical role will involve safeguarding customer and company data, protecting the company's reputation,and making vital decisions that are integral to shaping the state-of-the-art security posture for the business's future success.

This person should understand the risk assessment process to detect new threats, contribute in the action plan development and promote the progress of control implementation and evolution. The position will cover compliance activities, third parties risk assessments, management of clients requirements, internal awareness and technical controls evaluation.

As a valuable member of our Global Infosec Team, you will have the opportunity to collaborate with colleagues across the globe, fostering a dynamic and diverse work environment. Your role will involve working closely with stakeholders from various departments, forging strong partnerships to ensure the collective success of our information security initiatives.

Responsibilities:

Lead the alignment to the global ISMS (based on ISO27001:2022) over the APAC region.

Integrate the compliance efforts in the region with the global roadmap.

Perform routine activities to evaluate compliance with security frameworks and legislation.

Report the compliance status of processes and technology in the region. 

Identify risk related to information security in the technical environment, the relationships with third parties or any component of the company's operations.

Define security measures to lower the risks identified.

Understand about technical and administrative controls in the different areas: networking, operations, access management, SSDLC, cloud security, end-point protection, physical security, third party risk assessment, organization security and legal compliance.

Coordinate the information security assessments with 3rd parties (clients, suppliers).

Contribute in the development of awareness material and the process of delivery and measurement.

Coordinate and reply to internal and external audits related to information security.

Investigate on technologies that could improve the security baseline and the compliance (e.g. DLP, end-point protection, network security, security and vulnerabilities assessment).

Empower, assist, and mentor fellow members of the team to foster their professional growth and ensure collective success.

About You

The essentials:

Bachelor's degree in Computer Science, Computer or Systems Engineering or equivalent.

Minimum of 5 years of experience in InfoSec related positions.

Solid knowledge of security on networking, cloud, infrastructure configuration, end-point protection and SDLC.

Knowledge of the standards ISO 27001/2, SOC2, NIST-800.

Professional working proficiency in written and spoken English

Ability to confidently present findings to those with either a technical or non-technical background.

Self-directed, resourceful, and a critical thinker with attention-to-detail and proactive problem-solving skills.

Ability to self-organize and plan activities with commitment towards results.

Ready to learn new contents both from others or self-learned.

Looking forward to self-improvement and suggesting improvements to processes or activities.

Not a must, but a plus:

+4 year of dedicated experience in any of the following areas:

Security Risk Management

Security Consultant

Security/IT ISO implementer

Information Security Certification (e.g. CISSP, CCSP, CISM, AWS Security Specialist, etc)

#LI-CX1

About Monks

Monks is the global, digital-first, data-driven, unitary operating brand of S4Capital plc, where our culture centers on how we show up for the work and for one another. That begins with the commitment to strive for mastery—taking deep pride in our craft and creating work that sets the bar. In everyday execution, we drive momentum by choosing bold action rather than waiting for certainty. Above all, our teams are stronger together, bringing diverse perspectives into a unified team that communicates with clarity, trust, and mutual respect.

This commitment to craft and innovation translates directly into widespread industry acclaim: Monks was named a Contender in The Forrester Wave™: Global Marketing Services and a leader in the 2026 Gartner® Magic Quadrant™ for Global Digital Marketing Agencies. It ranks among Cannes Lions' Top 10 Creative Companies (2022-25) and remains the only partner featured in AdExchanger’s Programmatic Power Players list every year (2020-24). Named Adweek’s first AI Agency of the Year (2023) and The One Show’s inaugural AI Pioneer Organization (2025), Monks was also awarded Business Intelligence Group’s 2026 Excellence in Artificial Intelligence Award in the Human-Machine Interaction Team category. Additionally, Monks.Flow earned AI-based Marketing Solution of the Year at the 2026 AI Breakthrough Awards and a 2026 Global Generative AI Award in the Agentic Marketing Innovation category. Finally, Monks achieved a record-breaking number of FWAs and continues to hold the most of any partner.

We are an equal-opportunity employer committed to building a respectful and empowering work environment for all people to freely express themselves amongst colleagues who embrace diversity in all respects. Including fresh voices and unique points of view in all aspects of our business not only creates an environment where we can all grow and thrive but also increases our potential to produce work that better represents—and resonates with—the world around us. 

Source: Monks careers

Similar roles