負責公司於系統規劃/網路安全/開發與維運之資訊安全技術評估與查核, 偕同海外與總部IT Security共同討論與分享, 防範網絡威脅; 並擔任個人身分識別(PII)專案負責人, 進行跨部門協定個資使用和存取之合規性, 與制定/實施個人身份識別相關政策與處理程序。

Responsibilities

1. Responsible for the planning, coordination, delivery, and reporting of technical assessments and audits of networks, applications, systems development, and processes to protect from cyber threats and attacks

2. Conduct risk assessments, technology audits, and regulatory compliance assessments in areas covering IT general controls, application controls, business cycles, and IT security reviews

3. Be project lead of Personally Identifiable Information (PII), to manage compliance, and monitor the use/storage, develop, implement, and maintain related policies and procedures

4. Assist in handling internal and external information systems, tracking and handling information security incidents, and identifying system weaknesses and vulnerabilities and information security anomalies

5. Provide training in IT security best practices to elevate the knowledge of employees or clients

6. Design SOPs for internal audits, develop audit procedures, and complete related report writing and filing

7. Plan and carry out annual routine information operations, information security management, and general internal control audits, and track and address deficiencies

Qualifications,

-University graduate, major in Information Engineering or Information Science

-5 years of IT security-related working experience, including 1-year planning & participation experience in IT audits and control measures

-Understanding of the Infra architecture, experience in network, system administration, system development and management, and experience in managing protective installations in information security area is desirable

-Able to communicate complex technical issues in simplified terms to the internal members

-Independent work, project management, good cross-department communication, and strong negotiation skills

-Good communication skills in Chinese and English

投遞履歷前, 還請確認以下必要條件:

1. 5年以上資安技術&個資維運資歷; 熟悉資安技術與規劃，及BS10012規範與持續性更新

2.英語溝通能力, 內部英文書信 & 海外分公司電話會議

1st, 資安技術主管, HR

2nd, 處長級主管

3rd, CEO