安全合规工程师 Security Compliance Engineer

工作职责:

负责公司安全制度、安全管理建设，内部检查，配合监管检查等安全合规事项；

定期开展安全审计、IT系统审计、安全规范性检查，验证信息安全管控措施有效性，分析根因，推动风险整改；

熟悉数据安全合规知识，解析监管法律法规，协助业务方提供安全合规解决方案，推动落地。

岗位要求:

本科及以上学历，计算机或信息安全相关专业；

熟悉信息安全领域的相关技术和标准，包括但不限于ISO 27001、PCI DSS等；

具备IT风险治理、跟踪等方法论，熟悉企业IT风险管理和内部管控流程。

加分项：

拥有金融背景、拥有web3/区块链监管现场应审经验；

持有国际SDL证书优先，例如CISSP、CISM、CISA。

Responsibilities:

Responsible for the development of company security policies and management systems, conducting internal audits, and coordinating with regulatory inspections to ensure security compliance.

Perform regular security audits, IT system audits, and compliance checks to validate the effectiveness of information security controls, analyze root causes, and drive risk remediation.

Apply data security compliance knowledge, interpret regulatory requirements, and assist business units in implementing compliant security solutions.

Requirements：

Bachelor's degree or higher in Computer Science, Information Security, or related field.

Familiar with information security standards and frameworks such as ISO 27001 and PCI DSS.

Solid understanding of IT risk governance and tracking methodologies, with knowledge of corporate IT risk management and internal control processes.

Nice-To-Have:

Experience in the financial industry, with hands-on experience with Web3/blockchain regulatory audits.

Hold international security certifications, such as CISSP, CISM, or CISA is a plus