60-90K

数据合规和网络安全高级经理

Responsible for:
1. Overall responsible for developing, implementing and monitoring a strategic, comprehensive IT security plan across Enterprise IT and this role will provide the vision and leadership necessary to manage the risk to the business and will ensure business alignment, effective governance, system and infrastructure availability, integrity and confidentiality；and accountable for the planning,solution design, delivery for related security projects
2. Lead to shape enterprise Data&Cyber security related principles, policies, procedure to fullfill the shareholser's requirement and authority/law's requirement, especially where there are regulatory impacts and demands to ensure that the business provided are compliant to applicable regulations.
3. Be able to evaluate&define security architecture (functional level and infra level)and provide strategic risk guidence for IT projects, including evaluation and recommendation of technical controls.
4. Conduct the Cyber and data risk assessment for current business to evaluates potential security breaches, coordinates response, and recommend corrective actions to mitigate and reduce the risks.
5.Maintain a good relationship with shareholder, key stakeholders including business, other IT departments & security teams to deliver on security requirements timely and effectively.
6. Assist the line manager to join the relevant committees and meeting to present and explain cooperate level security projects/compliance status.
7. Provide the expert advice and support to the Goverance Affairs department's communication with relevant Authority and other Audit requirements.
要求
1. Know how for Enterprise security architecture design and related technology, like ISMS,SOC, VSOC, major technology, Data life cyle management etc
2. Solid knowledge latest regulatory and legal requirements on information security, PIPL, CSL, DSL, GDPR, etc. With the deep understanding of current security status and insight of industry trend.
3. Solid knowledge of ISO27001, TSAX, MLPS, SOX or other information security standards
4. Holder of CISSP, CISP and/or CISA, ISO, DPO preferred.
5. Proven experience in management of information security in multi-cloud and hybrid-cloud environments would be an advantage.
6. Experience in data governance, ICV compliance design, and Production security is highly preferred
7. Handson experience on Data Compliance related reporting tasks.
8.With excellent communication skills and teamwork spirit, can actively promote the problem improvement and discovery, with excellent logical analysis ability, the ability to solve complex problems