Task description/ Main tasks
Ensure Information Security Management at RD
Information Security KPI and Policies
Security Awareness training
Information Security Architect (ISA)
­-As the ISA , Consulting in the Data@Cloud (internal risk assessment for cloud hosting application) process
-Prepare Security profile as requested for internet facing and cloud hosting applications
-Join the regular Central and ***** ISA community meeting, contribute to the overall ISA goals and provide feedback to the ISA community.
China Cyber Security Law
-Understand the current China Cyber Security Law , Classified protection related regulations
­-Work closely with DGRC ISO and RD BISO and legal department for any update of the law and evaluate the necessary actions plan in order to compliance with the law.
Security Assessment
-***** Cyber Security Assessment (LCSA), followed the lead from RD Central office to conduct information security assessment and support to mitigate the findings.
-Support in the Corporate Audit process ,and mitigate findings related with RD China
-Governance on the RD Server room and run security check.
­
Experience
­ Minimum of 5 years work experience total
­ And minimum 2 years in Information Security or IT-Security relevant business areas (Business or IT)
Specific Knowledge
­ Knowledge in Information Security Management, process or IT-Security
­ Respective certifications (e.g. CISSP, TPSSE, CCSP, CSSLP) are desired
­ Working experience with methodologies such as NISTxxx / ISO2700x.
­ Infrastructure knowledge of Windows and Linux OS, Network and cloud technology
­ Strong understanding of current technology trends, security best practices, and cyber security threats (e.g. DevSecOps, OWASP ****0).
­ Broad knowledge of information security tools, concepts, and techniques, such as endpoint protection, Firewall, IDS/IPS, VPN, Encryption Standard..
­ Knowledge in Risk Analysis and Risk Management
­ High communication and presentation skills
­ Strong problem solving, analytical skills and organizational skills.
­ Fluent in spoken and written English