合规管理

Consultant (Security Strategy and Governance)
Qualifications:
• Bachelor degree or above, with Information Technology related background is a plus.
• Auditor qualification preferred (ISO27001 LA, ISO9001，CISA, MLPS Assessor, etc.)
Experiences:
• Relevant experience in planning, deploying and implementing security related management standards such as ISO27001/ISO27002, ISO27701, TISAX, MLPS, NIST SP800, etc.
• Relevant experience in security and privacy law compliance including GDPR, Cyber Security Law, Data Security Law, Personal Information Protection Law.
• Relevant experience in leading or participating security compliance improvement projects in coordination with different stakeholders internally and externally.
• Experience in management system integration is a plus.
• Experience in using GRC tool for compliance and risk management is a plus.
• Experience in in automotive or ICT industry is a plus.
Skills and abilities:
• Fluent in English including good oral and written communication skills
• Good skills in MS Office (word, ppt, excel)
• Able to travel domestically and potentially internationally
• Excellent task and time management skills
• Self-motivated, patient, professional and able to adapt to new challenges
• Efficient, organised, able to cope effectively under pressure, and undertake many concurrent tasks
• Team player with ability to work successfully within multicultural environments and effective interpersonal skills
Responsibilities:
• Support the information security consulting project and ensure satisfying project delivery.
• Follow the instruction from PM to ensure project tasks assigned are completed on time;
• Conduct gap analysis against the security compliance standard requirement, and communicate with related stakeholders on the findings and corrective actions needed;
• Follow the changes and trends in security compliance field and deliver the knowledge and experience through trainings and sharing sessions as subject matter expert to internal and external stakeholders.
• Follow the standard operating procedure and service toolkit to ensure the consistency and quality of the service delivery, and contribute to the SOP and service toolkit improvement.
• Participate competence trainings organized by the team on regular basis.
• Other tasks assigned by line manager.
咨询顾问（安全策略及治理） 
资格： 
• 本科及以上学历，有信息技术相关背景者优先。 
• 审核员资格优先（ISO27001 LA、CISA、等级保护测评师等） 
经验： 
• 有策划部署和实施安全相关管理标准（如 ISO27001/ISO27002、ISO27701、TISAX、等级保护测评、NIST SP800 等）的相关经验。 
• 具备安全和隐私相关法律法规合规方面的相关经验，包括 GDPR、网络安全法、数据安全法、个人信息保护法等。 
• 有主导或参与协调内外相关方进行安全合规改进项目的相关经验。 
• 有整合多个管理体系框架相关经验者优先。
• 有使用 GRC 工具进行合规和风险管理的经验者优先。 
• 有汽车或ICT （电信）行业经验者优先。 
技巧和能力： 
流利的英文读写和沟通能力
良好的使用MS Office（word、PPT、excel）等办公软件 
能够接受国内及可能的国外出差
出色的任务和时间管理技能 
有上进心的、耐心的、专业的，并且能够适应新的挑战 
高效、有条理、能够有效应对压力，并有承担多任务的能力 
具有在多元文化环境中团队合作的工作能力 
职责： 
1、支持信息安全咨询项目，协助项目顺利交付。 
• 根据项目负责人的安排，确保分派的任务按质按时完成
• 针对安全合规标准要求进行差距分析，并与利益相关方就调查结果和所需的纠正措施进行沟通； 
2. 关注安全合规领域的变化和趋势，并作为主题专家通过培训和分享会向同事和客户传递知识和经验。 
3. 按照标准服务流程和服务工具包提供咨询服务，确保服务交付的一致性和质量，并从专业角度对流程和服务工具包提出改进建议。 
4. 根据自身兴趣和技能支持由团队中其他成员主导的安全项目。 
5. 定期参加公司组织的能力培训。 
6. 完成上级布置的其他工作。
给想要加入我们的你：
We value every individual who works with us, and we hope you feel proud of being one part of us.
我们珍视每位一起共事的伙伴，并希望你因是团队的一员而感到自豪。
We always try to employ people who are better than us, and provide opportunities for you to grow together with us.
我们总是尝试让比我们更优秀的伙伴加入团队，并为你提供机会与团队一同成长。
We care about your ideas and feedbacks, we want to become better because of you.
我们重视你的想法和反馈，并希望团队因你而更加美好。