锦鲤求职岗位描述
THE ROLE
This role will work as (Senior) Analyst role to support IT Risk and Compliance lead (China & APAC) in Information Security area, to effectively collaborate with stakeholders to develop policies/processes, leading program launch/implementation, identify issues and risks, suggesting risk remediation strategies and driving towards compliance.
RESPONSIBILITIES
• Develop and maintain Tesla Information Security policies, frameworks, guidance and metrics based on internal, domestic and industrial information security regulations and standards, such as ISO27001, ISO27701, NIST, etc.
• Collaborate with Product owners, Engineers, and Business process owners, and system owners to ensure security process are well established and followed.
• Lead/Support in compliance programs across Cybersecurity, Data Security and Personal Information Protection areas as well as new tech compliance.
• Work on documenting and reporting control deficiencies upon discussion with business owners, Internal Auditors and collaborate with business owners regarding recommendations to address the root cause of issues and report support implementation of management remedial actions.
REQUIREMENTS
Must Qualifications
• Ability to conduct regulation research, interpretation, compliance assessment, root cause analysis, risk identification, working paper preparation and can handle internal reporting within the team or working level stakeholders independently.
• 5 to 8 years of working experience in house or from consultancy/accounting firm, with hands-on experience in any two areas mentioned below:
• - Cybersecurity Law (CSL) compliance
• - Data Security/Protection Law compliance
• Personal Information protection
• - ISMS/ISO 27001 implementation and operation
• With at least Bachelor’s degree in Computer Science, Information System management, or equivalent majors.
• Working efficiency in English and Chinese (both speaking and written).
• Good communicator and able to articulate requirements and expectations.
• Collaborative in nature, result oriented, and highly self-motivated to bring task forward with a quality delivery.
Preferred Qualifications
• Oversea education or working experience
• Experience in supplier security management
• Experience in regulatory enquiry, request or audit handling
• Experience in Automotive, Financial Industry (Insurance, leasing or loan)
• Certification of CISA, CRISC, CISM, CISSP, CIPM