Some careers have more impact than others. If you’re looking for a career where you can make a real impression, join HSBC and discover how valued you’ll be. We are currently seeking an experienced professional to
高级信息安全管理工程师 深圳 全职 研发 职位描述 1. 信息安全管理体系建设与运营 - 主导公司信息安全管理体系(ISMS)框架搭建、制度流程体系建设与持续改进(例如对标 ISO/IEC 27001、NIST CSF 等)。 - 建立信息安全治理机制:安全目标、年度计划、度量指标(KPI/KRI)、例会机制与持续改进闭环。2. 信息安全策略与制度流程制定 - 负责公司信息安全策略、标准、规范、基线与流程的制定与发布(如访问控制、账号与权限、密码、终端安全、日志与审计、数据安全、变更管理、资产管理、供应商安全等)。 - 将策略要求转化为可执行的管理控制与检查清单,确保可落地、可验证、可审计;推动在研发、制造、供应链、办公及海外站点等业务侧落实。3. 安全组织建设与责任分工(治理落地) - 设计并推动信息安全组织架构与职责分工(如安全委员会/安全负责人、安全联络人机制),明确各部门安全责任边界(研发/IT/制造/供应链/人力/法务等)。 - 推动安全责任制与考核机制(如制度宣导、签署、培训、抽查、通报整改)。4. 管理控制措施设计、推行与检查 - 建立风险管理流程:资产识别、威胁建模、风险评估与分级、整改计划与跟踪验证。 - 组织开展安全检查/内审/专项评估(权限审计、弱口令与账号治理、供应商安全审查、数据流转合规检查等),推动问题整改闭环。 - 与IT/安全技术团队协作,将管理要求落实到技术控制与运营机制(例如日志留存、EDR覆盖、补丁SLA、备份演练、权限审批流程等)。5. 安全事件与应急管理(管理视角) - 建立/完善安全事件管理制度与应急响应流程,组织演练,推动跨部门协同与复盘改进。 - 牵头重大风险/事件的管理报告与改进推动。6.
Some careers have more impact than others. If you’re looking for a career where you can make a real impression, join HSBC and discover how valued you’ll be. We are currently seeking an experienced professional to
Overview: Were seeking a Supply Chain Information Security Assessor to protect the lifecycle of standards, procedures, and logical assets across Amazons supplier network in APAC. This role requires international travel (up to 75%) across the APAC
Key Responsibilities Conduct the cybersecurity activities for a given project with a collaborative team that takes into consideration customer specifications, the cybersecurity process and bring their own experience into what is needed Interface with customer on
Career Area:Engineering Job Description: Your Work Shapes the World at Caterpillar Inc. When you join Caterpillar, youre joining a global team who cares not just about the work we do – but also about each other.
At Lilly, the work is demanding because patients are waiting. We unite caring with discovery to help make life better for people around the world, knowing that every decision, every detail, and every day matters. Headquartered
安全专家 北京 全职 金融 - 互联网金融 职位描述 安全体系建设1. 规划并搭建覆盖网络安全、应用安全、数据安全的全维度信息安全体系2. 制定并落地信息安全管理制度、策略与操作规范,推动内部安全合规执行安全技术防护1. 负责防火墙、IDS/IPS、防病毒、DLP、漏洞扫描等安全设备的部署与运维2. 开展渗透测试、漏洞挖掘与修复,构建主动防御体系3. 监控网络流量与系统日志,及时发现并处置入侵攻击与异常行为安全事件响应1. 牵头处理各类安全应急事件,制定应急预案并组织演练2. 跟踪分析最新网络威胁态势,输出风险预警与应对方案安全合规管理1. 确保企业系统符合等保、网安法等国家信息安全法律法规要求2. 配合完成各类安全审计、认证与合规检查工作团队与项目管理1. 负责安全团队日常管理与人员培养,提升团队整体技术能力2. 主导安全服务项目实施,包括风险评估、安全加固等3. 推动安全技术创新,引入前沿安全技术与工具提升防护能力 职位要求 (一)基础条件学历专业:计算机、信息安全、网络工程等相关专业本科及以上学历,部分优秀从业者可放宽至大专工作经验:5年以上信息安全领域工作经验,其中3年以上企业级安全体系建设或安全运维经验证书资质:持有CISP、CISSP、CEH、OSCP等权威安全认证者优先(二)核心技能技术能力:精通网络安全协议与主流安全技术,掌握漏洞挖掘、入侵检测、应急响应等核心技能熟悉Windows、Linux等多系统运维,熟练使用Wireshark、Nmap、Metasploit等安全工具具备Python、C++等编程语言能力,能够独立开发安全脚本与工具体系认知:熟悉ISO27001、NIST等国际安全框架,了解等保3.0、网安法等国内合规要求具备安全风险评估、安全体系规划与落地能力软技能:良好的跨部门沟通协调能力,能够推动安全策略在业务部门落地较强的问题分析与解决能力,可独立应对复杂安全事件高度的责任心与保密意识,具备团队协作精神与抗压能力 投递...
Some careers have more impact than others. If you’re looking for a career where you can make a real impression, join HSBC and discover how valued you’ll be. We are currently seeking an experienced professional to
Some careers have more impact than others. If you’re looking for a career where you can make a real impression, join HSBC and discover how valued you’ll be. We are currently seeking an experienced professional to
Job Responsibilities & Accountability (Key Roles, Functions & Accountabilities) 职位职责 Perform evaluations of processes, systems and components according to IEC 62443, ECUCC and CRA. Provide Consultancy and evaluation services according to ETSI EN 303 645, ETSI
Position Summary: We are seeking an experienced professional in Information Security Management. The ideal candidate should have a strong understanding of IT Security policies, industry control frameworks, and local regulatory requirements, as well as the ability
Job Title: IT Audit Associate Location: Beijing, Shenzhen Department: IT Audit Reports to: IT Audit Manager/Senior Associate Job Summary: As an IT Audit Associate at MaloneBailey, you will be part of a dynamic team responsible for
Select how often (in days) to receive an alert: La siguiente información ofrece un resumen de las habilidades, cualidades y cualificaciones necesarias para este puesto. Project Cybersecurity Manager Company: Alstom At Alstom, we understand transport networks
Project Cybersecurity Manager Para presentar una candidatura, simplemente lea la siguiente descripción del puesto y asegúrese de adjuntar los documentos pertinentes. Date: 7 May 2026 Company: Alstom At Alstom, we understand transport networks and what moves