Assurance - Forensic & Integrity Services - Cyber Crisis Response - Shanghai

岗位名称：高级顾问 - 网络危机响应（Senior Consultant）

工作年限：3–5 年相关风险/危机/网络安全应急经验

岗位职责

1. 牵头为客户提供网络安全突发事件应急支持，包括勒索病毒、数据泄露、系统入侵等网络攻击事件的危机处置；统筹危机期间对内对外沟通协调、证据固定、多方利益相关方对接，落实危机现场响应工作。

2. 在网络危机场景中提供调查支持、关键文档统筹管理，协同内外部法律顾问，保障危机全过程信息留存、证据合规。

3. 网络危机结束后主导事后复盘评估，梳理事件处置经验，出具优化建议，协助客户迭代应急预案、管控流程与危机管理框架。

4. 设计并开展定制化网络危机模拟演练（桌面推演），赋能客户管理层与一线团队的网络危机处置能力；制作汇报材料，向客户董事会、高管层汇报风险分析与改进方案。

5. 参与业务拓展、投标讲标，撰写技术方案、RFP应答材料，开发网络危机响应相关标准化服务产品。

任职要求

1. 本科及以上学历，拥有3–5年网络安全应急、危机管理、风险咨询、法务调查或政企网络安全相关实战经验；熟悉网络攻击、数据泄露事件完整处置流程优先。

2. 理解ISO 22361危机管理体系框架，了解网络安全法律法规、数据合规相关要求；具备应对企业重大网络突发事件实操经验。

3. 优秀中英文书面与口头沟通能力，可以独立面向高管层开展汇报；具备项目全流程管理能力，能够独立带队交付中型咨询项目。

4. 拥有较强的抗压能力，可按需支持7×24小时突发事件应急响应；具备良好逻辑分析、问题解决能力。

5. 持有CISM、CISSP、危机管理相关资质为加分项；四大咨询、安全厂商、甲方网络安全部门背景优先。

Job Title: Senior Consultant, Cyber Crisis Response

Experience Required: 3–5 years relevant experience

Key Responsibilities

1. Lead end-to-end client support during cyber incidents including ransomware attack, data breach and system intrusion. Coordinate internal & external communications, evidence collection and stakeholder engagement throughout the crisis lifecycle.

2. Provide investigative assistance and critical document management support amid cyber crises; collaborate with internal and external legal counsel to ensure compliance in information handling and evidence preservation.

3. Lead post-crisis assessment after cyber security events, identify lessons learned, deliver actionable recommendations, and assist clients to update crisis management plans, procedures and governance frameworks.

4. Design and deliver customized cyber crisis management tabletop simulations, upskill client leadership and operational teams. Prepare reports and present findings to client board and senior management.

5. Support business development activities including tender presentation, proposal & RFP drafting, and develop standardized service offerings for cyber incident response.

Requirements

1. Bachelor’s degree or above, with 3–5 years practical experience in cyber incident response, crisis consulting, risk advisory, forensic investigation or enterprise cyber security. Proven track record in handling major corporate cyber incidents is preferred.

2. Working knowledge of ISO 22361 crisis management framework; familiar with cyber security regulation and data compliance requirements.

3. Excellent written and verbal communication in both English and Chinese; capable of independent C-suite presentation. Solid end-to-end project management skills to lead medium-sized advisory engagements.

4. High resilience to work under pressure; able to provide on-call 24/7 support for urgent cyber crisis response. Strong analytical and problem-solving mindset.

5. Relevant certifications (CISM, CISSP, etc.) are preferred. Candidates with prior experience in Big Four advisory, cyber security vendors or enterprise in-house security teams will be prioritized.