信息安全项目经理岗位职责

职位名称：安全项目经理







岗位要求：

1、本科及以上学历，计算机、信息安全、软件开发、密码学等相关专业，

2、3年相关工作经验，能力突出学历不限。

3、熟悉网络和数据安全标准政策及理论原理。

4、熟悉安全运营、威胁分析、风险评估方法论、有一定的实施经验。

5、具有较强沟通协作能力，能够深度理解用户需求及项目目标。

6、具有较强项目管理能力，独立承担过日资企业的大型信息化项目经理的优先考虑。

7、具有较强信息安全咨询及文档处理能力，能够PPT编写及向各级领导汇报。



工作内容：

1）了解客户需求、完成解决方案所需要资料，

2）负责规划项目管理，制定项目交付计划并执行。包括项目预算，采购，集成，工期，成本，范围，计划和项目启动。

3）负责项目文档管理，制定任务分配文档。

4）负责项目团队建设,资源协调,保证资源及时到位和释放。

5）负责建立报告沟通策略，保持与各层级客户和内部各管理组织的沟通和汇报，确保各重要干系人对项目交付情况的信息和理解达成一致。

2、项目实施管理：

1）负责安全方向项目交付全过程，按照项目计划积极进行地实施，并保证项目交付满足项目质量标准、经营目标和各种业务运作指标。

2）设备发货和交付，负责控制项目交付成本、交付活动和客户交接。

3）负责对内和对外的项目经营和进度汇报，执行成本控制策略和措施，并负责预测项目经营和交付结果。

Job Description
Responsible to support Regional Information Security Risk Governance fthe Asia zone to ensure the Security posture of business units are properly measured, monitored managed Assist in the development promotion of of Information Security policies, standards, procedures according to the industry best practices standards (e.g. NIST800-53, , NIST Cyber Security Framework, ISO27000, CIS, ISA/IEC62443, etc.), technologies, relevant regulatory group requirements Evaluate manage capabilities that enable theganization to reliably achieve objectives, address uncertainty act with integrity, as a whole more responsive efficient in a consistent manner Act as the main responsible party to drive align the policy compliance across Group, business units business lines toward the same direction. Perform manage regular Information Security Control assessment to ensure that business units are compliant with the Group Information Security Policies Standards Manage remediation activities from Security assessments audit findings to mitigate the risks Identify address cyber risks requirements inder to protect theganization from adversity, surprise weakness MonitInformation Security Risk control, test to determine the control performance effectiveness with continuous improvement of KPIs. Support the Cyber Security project implementation daily activities with respect to Information Security best practices risk assessments Qualification (Public fHiring) At least 5 years hands-on experience in IT Security, Governance Risk Management, with 2 years in managerial team position Extensive knowledge understanding of Information Security framework, such as ISF, ISO27001, NIST Cyber Security Framework. Sound knowledge of Information System, IT Operation IT Audit Knowledge on OT Security. Good stakeholder engagement management skills Great sense of ownership servicing mindset Strong liaison skill, teamwork, passion commitment mentality Strong self-motivation, with good leadership, interpersonal analytical skills, lead through influence, communicate effectively to stakeholders on risk management cyber security governance Strong problem solving project execution skills; able to handle changing priorities drive difficult decisions; highly dependable team player with ongoing commitment to excellence Relevant professional certification, such as CISSP, CISA, CISM, CRISC CGEIT is desired Good communication in English Mandarin,

岗位职责
1.负责网络系统的安全防护，监测和防范网络攻击，保障系统安全稳定运行；
2.评估网络安全风险，制定并执行安全策略，确保信息安全合规；
3.维护网络安全设备，及时更新安全防护软件，修复漏洞；
4.协助处理网络安全事件，进行应急响应和恢复；
5.开展网络安全培训，提升团队安全意识和技能水平；
岗位要求
1.计算机/信息安全本科或本科以上，5-8年信息；
2.精通信息安全评估理论，熟悉安全加固和安全计技术，有丰富的实践经验;
3.掌握主要软硬件的信息安全点和攻防技术，熟安全控制技术并运用相关工具；
4.精通网络架构设计，熟悉路由器、防火墙、IDSIPS/WAF等配置及数据加密技术;良好的团队协作能力和学习能力。