Information Security Expert_C
Core
Own the company's information security governance program, including compliance, risk management, security architecture, penetration testing, and incident response.
Role type
Senior Information Security Expert (Governance & Compliance)
Builds
ISO/IEC 27001 ISMS, China MLPS 2.0 compliance, security architecture controls, detection capabilities, and security culture programs.
Domain
Information Security, Cybersecurity Compliance, Risk Management
Required skills
ISO/IEC 27001, MLPS 2.0, GDPR, risk assessment, data classification, PIAs, vendor security assessments, incident response, security architecture, penetration testing, security training program design, policy development, regulatory inspection response
Preferred skills
CISSP, CISM, CISA, CRISC, CCSP, Python/Shell scripting, Zero Trust, IAM/SSO, cloud-native security
Technologies
Linux, Windows, TCP/IP, cloud-native, container security, vulnerability scanning tools
Responsibilities
Develop annual security and compliance roadmap; lead ISO/IEC 27001 and MLPS 2.0 build-out and external certification; conduct risk assessments and supply chain security reviews; drive security architecture planning and key control implementation; own authorized penetration testing and red teaming; establish detection capabilities and incident response SOPs; build and deliver enterprise security training programs.
Seniority
Senior, hands-on IC with governance leadership
