[北京] 这里需要一个英文非常好的资深信息安全工程师啦！

V2EX = way to explore

V2EX 是一个关于分享和探索的地方

现在注册

已注册用户请登录

• 外包信息请发到 /go/outsourcing 节点。

• 不要把相同的信息发到不同的节点

这是一个创建于 1989 天前的主题，其中的信息可能已经有所发展或是发生改变。

Key Accountabilities  Given the ever increasing focus of regulators on Cyber Security this role requires interaction with regulators in the region. This role requires updating local and regional management on information security matters to ensure they are informed on Cyber Risk.  Serves as the primary Interface to the Information Security (IS) organization supporting Lines of businesses, operations and technology. Serves as the IS Officer for the business partners to share emerging risks and focus areas with business and technology management teams.  Implement and monitor corporate IS policies/programs within lines of business, to ensure timely program delivery and manage risk within tolerance  Partner with the Technology teams to ensure implementation and sustainability of controls  Partner with the Supplier risk management team to ensure remediation of risks  Develop strong understanding of underlying technical requirements of the technical IS standards, identification of security gaps and provide consultation to the businesses for remediation options  Maintain and enhance status as a subject matter expert for all IS matters  Partner with the IS Operations team to provide support on investigations and incident response  Provide oversight to ensure that processes and projects are completed in a timely manner  Monitor risk exceptions, and resolutions, in response to security events, assessment and audit results  Maintain and socialize the status of IS program and initiatives within lines of businesses  Respond to security events by initiating and coordinating actions needed to protect the business and its clients  Provides expert advice to the business on current IS and Cyber threats affecting the business and clients  Engage with regulators and auditors on Information Security and TRM matters.

Knowledge & Skills  7+ years of experience in information security or related discipline. Financial industry experience preferred  Degree in Engineering - computer science/electrical/electronic/Information Systems or equivalent.
 Information Security Certifications preferred, CISSP, CISM, CISA  Ability to prioritize, execute tasks and handle multiple projects concurrently.  Ability to communicate and present effectively through a range of mediums, to various audiences, in a way that demonstrates subject-matter knowledge. Strong influencing and negotiation skills-- with the demonstrated ability to engage and persuade stakeholders to take action and make decisions that aim to further business objectives.  Strong service management and service delivery orientation  Strong conceptual skills; ability to deal with ambiguity; creativity; lateral thinker  Strong English spoken and written skills

7 条回复 • 2019-07-25 11:28:18 +08:00