About Us

Headquartered in Singapore, SATS Ltd. (SGX stock code: S58) is one of the world’s largest providers of air cargo handling services and Asia’s leading airline caterer. SATS Gateway Services provides airfreight and ground handling services including passenger services, ramp and baggage handling, aviation security services, aircraft cleaning and aviation laundry. SATS Food Solutions serves airlines and institutions, and operates central kitchens with large-scale food production and distribution capabilities for a wide range of cuisines.

SATS is present in the Asia-Pacific, the Americas, Europe, the Middle East and Africa, powering an interconnected world of trade, travel and taste. Following the acquisition of Worldwide Flight Services (WFS) in 2023, the combined SATS and WFS network operates over 225 stations in 27 countries. These cover trade routes responsible for more than 50% of global air cargo volume. SATS has been listed on the Singapore Exchange since May 2000. For more information, please visit www.sats.com.sg

Why Join Us

At SATS, people are our greatest asset and we build our success on the knowledge, expertise and performance of every contributor, by embracing diversity and uniqueness. As part of our holistic approach and commitment to embracing FAM (Fulfilling, Appreciated, Meaningful) in the workplace, we offer the runway to develop Fulfilling careers that foster your career growth, recognising and Appreciating the strength of talent and capabilities that we continue to build internally; and inspiring and encouraging each other to make Meaningful contributions in the work we do at SATS.

Key Responsibilities

The Role

The Compliance Analyst strengthens SATS’ cybersecurity posture by turning regulatory and industry requirements into clear, enforceable policies and day‑to‑day practices. The role partners closely with Security Architecture to align SATS policies and standards with legal, regulatory, and benchmark expectations; executes enterprise compliance assessments; prepares regulatory submissions (e.g., ISO/IEC 27001, PCI DSS, NIS2); and coordinates evidence and interviews for audits.

This analyst also manages the ongoing enterprise‑wide cybersecurity training program and, when required, directs the workload of consultants supporting this compliance “tower.” The focus is practical compliance: prove it, document it, and make it stick across the enterprise.

Key Responsibilities:

• Collaborate with Security Architecture to develop, review, and align SATS cybersecurity policies and standards with legal, regulatory, and industry benchmarks.
• Conduct assessments across the enterprise to ensure adherence to SATS cybersecurity policies and standards.
• Prepare and submit reports/attestations to regulatory bodies and schemes (e.g., ISO/IEC 27001, PCI DSS, NIS2) to demonstrate compliance.
• Collaborate with and, when needed, manage workload and direction of consultants engaged within the Compliance function.
• Deliver and manage an ongoing enterprise‑wide cybersecurity training program.
• Coordinate with internal/external auditors of enterprise security capability, managing requested interviews and artifact/evidence requests.

Key Requirements

• Bachelor’s degree in Information Security, Information Systems, Compliance/Law, or related discipline; equivalent experience considered.
• Relevant certifications preferred (e.g., ISO 27001 Lead Auditor/Implementer, CISA, CISSP, PCI ISA).
• 3–5 years in cybersecurity compliance, audit, or policy governance within a regulated or standards‑driven environment.
• Hands‑on experience conducting compliance assessments and coordinating audits.
• Experience preparing submissions for certifications/regulators (e.g., ISO 27001, PCI DSS, NIS2).
• Background partnering with Security Architecture and cross‑functional teams (IT, Legal, HR, Internal Audit).
• Experience designing and delivering security awareness/training at enterprise scale.
• Exposure to managing or directing external consultants.
• Strong grasp of cybersecurity policies/standards lifecycle and their mapping to legal, regulatory, and industry benchmarks.
• Working knowledge of ISO/IEC 27001, PCI DSS, and NIS2 expectations and evidence requirements.
• Proficient in audit coordination, evidence management, and defensible documentation.
• Clear, concise writer able to produce policies, standards, reports, and management‑ready summaries.
• Effective program management skills for rolling out enterprise training.
• Stakeholder management and negotiation skills, including with regulators, auditors, and consultants.
• Organized, detail‑driven, and deadline‑reliable; able to manage multiple concurrent requests.