玛氏中国 · 信息服务部

Cybersecurity Assurance & Compliance Senior Lead (R141599)

薪资面议  /  广州

今天 18:29 更新

我要推荐 内部推荐

若你发现本职位存在违规现象,欢迎举报。

提交成功

3s后自动关闭

举报职位

团队详情

职位属性

招聘类型:社招
工作性质:全职

职位描述

The Senior Security Architect to drive maturity of the security posture for Mars Enterprise systems and data regulatory compliance. He/she will leverage security standards and frameworks in providing guidance to business segments for protecting business growth with securing digital experiences by design. This role will define and mature Data Security standards and frameworks to support the evolving global regulatory landscape. The senior security architect will use threat intel, audit feedback, vulnerability insights, and more conjunction with trends to identify improvements for evolving Mars Enterprise Security posture.

What are we looking for?

Bachelor’s degree in computer science or other IT-related technical degree. Relevant Security Certifications such as a CISSP or CISSP-ISSAP is desired.

5+ years of experience in IT as a cyber security or working in information security for a large corporation.

Technical understanding of security controls with the ability to clearly communicate direction to other security architects and corporate leaders

Good communication skills, and the ability to explain security best practices to a non-technical audience

General understanding of computers, networks, operating systems, applications, and the web/cloud

Fundamental understanding of security controls for common platforms and devices, including Windows, Linux, network equipment and cloud computing

Understanding of major data privacy regulations (i.e., GDPR, CCPA, CSL, CBDT, PIPL, DSL)

What will be your key responsibilities?

Provide security review/ consulting for project teams or other stakeholders within the business segments to help Influence the overall architecture direction of IT systems and applications and ensure the confidentiality, integrity and availability of the information is protected.

Partner with Segment teams, Enterprise Architecture, and other key stakeholders to conduct security assessments in defining applicable controls to secure solutions by design.

Leverage threat intel, audit findings, vulnerability assessment data, and other applicable data sources to Identify critical deficiencies for Mars Enterprise systems and make recommendations for Improvements

Contribute to principles, guidelines, standards, and development of solution patterns to ensure solution decisions are aligned with the enterprise future-state architecture vision

Provides Inputs for security architecture strategy in identifying focus for maturing security posture for Mars enterprise systems.

Drive the identification and development of security reference architecture patterns and standards for Enterprise platforms.

Liaison between MARS business owner/IT business owner and MARS Information Security to complete the security architecture review.

Perform timely security architecture review to align with Mars information security policies, standards, and reference architecture patterns.

Provide guidance on the architecture of IT systems and applications to enable the protection of confidentiality, integrity and availability of the information.

Security compliance assessment and support to the Mars project teams.

Document gaps/issues with recommendations to applications Business owner/IT owner on how to address these in alignment with Mars policies and standards.

Follow-up with the Mars project teams to help close the architecture review requests in a timely fashion. Communicate updates, deadlines, and estimated completion dates to the Mars project managers.

Business enablement by working closely with the project teams to assist them with the required support as Mars Project Teams implement the security controls.

Work with Mars enterprise security architects and provide active support to process optimization initiatives.

Provide Mars business teams and project managers the process overview and guidance for each phase of review process.

Good technical and communication skill

Present the security architecture review findings in Architecture Review Boards

#TBDDT

任职条件

Same as Job Description

公司福利

  • 产品内购
  • 团队建设
  • 培训机制
  • 五险一金
  • 年终福利
  • 商业医疗保险
  • 弹性工作
  • 工会福利