【上海 head of Cybersecurity china招聘】-猎头顾问上海招聘信息-猎聘

杨女士 1小时前在线已认证

合伙人 · 上海聚轶企业管理咨询有限公司

聊一聊

职位介绍: Purpose of the Job - Manage regional Cybersecurity Operations - Cloud security - Vulnerability management - Access control management - DevSecOps integration - Supply Chain (OT) Security - Cybersecurity architecture and design - Applications Security - Container Security - Data Privacy - Data Leakage Protection The role will be responsible for ensuring that all technology platforms and data within APAC are compliant with all applicable regulations, including and not limit to: - Internal/External audit - SOX regulations - MICS controls - China Cybersecurity Law - GDPR - China Personal Information Protection Law - Others where applicable Accountabilities - Responsible for all technical and process Information- and Cybersecurity consulting across the region of responsibility, ensuring appropriate risk identification and reporting. - Responsible for ensuring all products and platforms are built to the standards of the Information Security Policy and Data Privacy standard(s), and for assessing, assembling, and providing risk visibility to the Global Head of Risk, Solutions & Assurance - Leads technology compliance across a complex landscape by developing a repeatable, sustainable, and evolving program for the region of responsibility - Develops and delivers risk reports to the leadership and executive board of the region of responsibility, including vulnerabilities and threats - Responsible for the embedment of information and cybersecurity across all external-facing products and platforms (on-premise/cloud/PaaS/SaaS). - Responsible for the tailoring and delivery of Information Security awareness and training across the region of responsibility. - Responsible for partnering to conduct assurance tests across the regional ecosystem, products, platforms, and operations - Assurance will be conducted by the coordinating and/or executing of all penetration tests, including SOX, PCI and physical to digital vulnerabilities, as well as partnering with Audit for assessments in the region of responsibility - Leads the Risk exception handling process for the region of responsibility and elevation/reporting. - Responsible for managing APAC cybersecurity & compliance budget.. Qualifications and Technical competencies required Education: - BS in Cybersecurity, Computer Science, Computer Engineering, Systems Engineering or related IT discipline. - 7+ years’ experience in Cybersecurity and/or IT compliance domain - 3+ years’ experience in leading a team - Experience in drive and coordinate between multiple global and local cross-function teams - Risk Management experience and robust understanding of IT and Operational Risk Management framework, including the construction of an effective control environment - Vast information security expertise, including familiarity with and/or experience leading o Risk and compliance (e.g. SOX, GDPR, CSL) o Business Continuity/Disaster Recovery o Application Security o Awareness and Compliance Training o Vendor Risk Management - ITIL v4 - DevSecOps - Knowledge of cyber security framework, principals, general IT controls is preferred (NIST, CIS, ISO27000) - Strong communication and coordination skills, good written and spoken English skill - Ability to work independently and objectively to challenges within a fast-changing environment, - Security certifications such as CISSP, CISM or other relevant are preferred

其他信息: 语言要求：不限; 行业要求：日化

猎聘温馨提示：

1. 如您发现平台内招聘方存在以下违规行为的，请立即举报

· 扣押您的身份证件或者其他证件；
· 要求您提供担保人、担保金或者以其他名义向您收取财物（如培训费、体检费、资料费、置装费、押金等）；
· 强迫您入股或者向您集资；
· 以招聘名义牟取不正当利益；
· 发布虚假招聘广告信息；
· 工作时长违反劳动法规定；
· 存在其他损害您的合法权益的行为。

2. 如您应聘的岗位属于涉外劳务合作/海外岗位的，请务必核实招聘方对外劳务合作资质取得情况，同时注意自身资金安全，防范招聘欺诈。

猎聘温馨提示：

猜你喜欢