职位信息

职位信息

信息安全运营经理/高级经理

立即申请

May. 17, 2021

信息安全运营经理/高级经理

中国

上海

工作职责：

Lead a security operation team on operation of security tools SIEM, IAM, vulnerability scan, Vulnerability remediation etc.
Manage SIEM platform, organize log collection, optimize modeling rules to make them compatible with company’s threat model and attack surface. take initiative to incident response, investigate incidents and work with operation team remediate relevant risks.
Define security emergency scenario and lead emergency drill. Lead and respond to security incidents and investigations and targets reviews of suspect areas, identify and resolve root causes of security related problems.
Support global infrastructure project as an information security BP, provide security best practices and our company security policies as well as compliance, to make all risk at an acceptable level.
Work directly with the Business Unit, 3rd parties and other internal teams and organizations to facilitate information security risk analysis and risk management processes and to identify acceptable levels of residual risk.
Proactively make improvement on security postures to any cybersecurity threat, make suggestions on security tools selection
Monitor enterprise cybersecurity status, Hands on network security equipment, Infrastructure network and systems hardening.

任职能力：

Bachelor degree or above in Computer Science, Information Technology, or related disciplines;
Minimum 5 years of experiences in Information security practices.
Good communication skills, good command of spoken and written English and Chinese
Strong knowledge of Cybersecurity & risk management.
Ability to operate security devices of FW, IPS/IDS etc.
Have strong hands-on experience in at least 3 of below area.
SIEM / Security Event Management
IAM/ PKI / SSO
SEP / Anti-Virus
Virtualized security
Encryption
Data Loss prevention
Security Incident Management
Patch / Vulnerability Management
Advanced Forensic Analytics
ICS/SCADA Security
Data integrity, validation
Holder of certifications such as CISSP, CISP, CISM, CCNP, PMP, ITIL, Prince2, Information Security Multi-Level Protection Scheme(MLPS) and/or other related certifications is an advantage;