Compliance and Information Security Manager

About the role

SleekFlow, an AI suite for revenue-driving conversations headquartered in Singapore, is looking for an experienced Compliance and Information Security Manager. The role ensures the company adheres to legal standards and in-house policies, enforces regulations across all levels of business and guides compliance matters. It requires a good understanding of computer networks and systems, the ability to spot security risks and devise mitigation strategies, and a commitment to confidentiality and integrity.

Key responsibilities

• Audit and certification: conduct internal and external IT/compliance audits, maintain certifications such as ISO 27001, and manage client-compliance documentation and surveys.
• Risk and vulnerability assessments: run continuous risk assessments, oversee application security testing (SAST/DAST) and manage vulnerability scanning schedules.
• Data governance and privacy: develop data governance frameworks, policies and privacy standards (e.g. GDPR) across current and expanding global markets.
• Security operations and incident response: monitor daily security alerts on cloud infrastructure and own the incident response lifecycle, from containment and forensics to reporting to senior leadership.
• Threat intelligence: proactively hunt for hidden threats and improve controls to prevent compliance or security violations.
• Cross-department collaboration: partner with engineering and business teams to enforce standards, assess risks in new ventures and design cybersecurity readiness training.

Required profile

• Minimum 4 years of proven experience in an information security, compliance or risk manager role.
• Good knowledge of legal requirements and procedures.
• Strong oral and written communication skills and analytical mindset with attention to detail.
• Professional certification in compliance (e.g. CCEP, CISSP).
• Technical background with an understanding of software development and IT infrastructure.

Required skills

• ISO 27001 and other industry-standard certifications.
• Data governance, data classification, data quality management and data privacy regulations such as GDPR.
• Risk management and industry-specific security standards.
• SAST/DAST and vulnerability scanning.

What we offer

• Compensation package including a 13th-month salary and stock options.
• Group medical insurance, transport allowance and examination and education allowance.
• Paid birthday leave and flexible work-from-home policy.
• International team culture and continuous learning from experienced team leads.