Senior Analyst, Information Security (App & Infra Risk Management)

REQ15152 Senior Analyst, Information Security (App & Infra Risk Management) (Open Date: 20/10/2026)

POSITION SUMMARY:

As Senior Analyst, Information Security (Application & Infrastructure Risk Management) you will be part of the Information Security Team focusing on identifying, managing, and reporting Information Security Risks in Melco

PRIMARY RESPONSIBILITIES:

• Lead the security assessment on the new corporate initiatives including the architecture design, data / privacy protection, compliance framework etc to identify potential risks and ensure compensation controls are put in place
• Liaise and facilitate with business units, IT Engagement, PMO and other Information Security function teams to ensure the company security best practice is applied and identify any residual risk throughout the project life cycle
• Ensure deployed technologies are complying to relevant compliance and regulation requirements
• Prepare the Security clearance sign-off report/review on new systems prior to live implementation
• Evaluate the current organization security posture with the latest industrial security trend / technology to identify enhancement opportunities and provide effective recommunication to management team
• Conduct risk review and analysis on Change/Service Request in ticketing system to identify potential risks
• Coordination on the evaluation, deployment, and management of current and future information security technologies
• Participate in regular review and utilize the Security framework (e.g. ISO 27001, NIST) to develop the security standard and guideline as the company control framework
• Support periodic Security documents updates to identify and address the latest trends and risks discovered
• Remain informed on current standards, trends, and issues in the information security industry
• Support annual internal/external audit activities
• Gather threat intelligence information from different sources and inform relevant parties to mitigate risks affecting the systems in use
• Conduct security assessment on emerging technologies such as but not limited to Cryptocurrency, Blockchain and AI systems/applications.

KEY PERFORMANCE INDICATORS:

• Complete assigned security assessments within the agreed timeframe and in accordance with the definedassessment process.
• Identify, document, and communicate key security risks, residual risks, and recommended compensating controls for new systems, change requests, and technology initiatives.
• Track agreed remediation actions, risk treatment items to ensure timely follow-up and closure.
• Review relevant threat intelligence notifications and communicate applicable risks or required actions to the appropriate stakeholders in a timely manner.