Information Security Director

公司介绍

外资零售快消公司

职位描述

Team Leadership, Governance and Strategic Direction 1.Develop, maintain and continuously enhance the organization’s information security governance framework, including cyber security strategies and policies, ensuring alignment with regulatory and compliance obligations. 2.Collaborate across all business units to drive consistent implementation of cyber security policies and controls across technologies, projects and services. 3.Partner with business leaders and operational teams to provide expert guidance and ensure security and compliance requirements are embedded throughout the project lifecycle and into production environments. Technology Localization 1.Lead and execute cyber security localization initiatives that address regional regulatory requirements, strengthen regional threat intelligence, mitigate supply chain risks and build resilience across the cyber ecosystem. Threat Detection and Incident Response 1.Monitor the evolving cyber threat landscape and oversee the organization’s incident response activities, including managing communications and providing crisis leadership during major security events. Reporting and Executive Communication 1.Deliver clear and timely reporting on cyber security risks, incidents and emerging threats to the Senior Executive Team and, when necessary, to external authorities. Situational Awareness, Culture and Capability Uplift 1.Strengthen the organization’s overall security posture by fostering a risk‑aware culture and driving continuous improvement in compliance and security processes. Maintain ongoing situational awareness of the organization’s cyber security posture, identify emerging threats and evaluate the effectiveness of existing controls.

职位要求

Bachelor’s degree, with a major in IT or other relevant disciplines. 8+ years’ experience in IT Security field. Solid knowledge latest regulatory and legal requirements on information security. Solid knowledge of ISO27001, NIST, MLPS or other information security standards. Experience of establishing and leading high-performance teams, and a record of strong leadership that has contributed to or defined policy direction and strategy. Strong stakeholder engagement skills to advise on evolving cyber threats and strengthen risk management, providing cyber security technical direction in a large and complex organization. Holder of CISSP, CISM and/or CISA preferred. Proven experience in cyber security solutions evaluation, deployment and management. Strong desire to develop and follow standards and procedures. Strong communication skills in both Chinese and English.

公司介绍

职位描述

职位要求

Shawn Cong