A. Accountabilities

The job holder is accountable for digital security operations in China includes:

● Implementation of digital security strategy in business operations.

● Digital security risk reporting and follow up.

● BPRO process for digital projects.

B. Main activities

● Strategic activities

• Support CISO on the deployment of Corporate Digital Security initiatives

• Support business projects by participate Digital Security validation processes

• Participate Chinese Digital Security initiatives and programmes

• Identify and consolidate Digital Security risks and their related response plan in China

● Client related activities

• Interface with local business units on digital security topics.

● Operational activities

• Ensure compliance with Digital Security Corporate and Divisional requirements /

• standards.

• Support the Business Project Registration Office (BPRO) methodology, assisting

• business projects seek security validation.

• Provide security support on products, services and projects.

• Contribute to security awareness and education by design, organize and deliver

• materials and sessions.

• Involve in digital risk identification, assessment, remediation and report

• Implement digital security projects and initiatives.

• Support critical digital asset management.

• Other tasks assigned by the CISO.

C. Outputs

● Client related Outputs

• Business activities follow corporate security policies and standards.

● Operational Outputs

• Meet operational objectives.

• Security support to business on time and on quality.

• Fulfill the yearly awareness training plan.

• Digital security risk map/dashboard and corresponding action plan.

• Executive summary and report on technical investigations.

Qualifications

• Education: Bachelor degree or higher, major in computer science, information security or similar principle.

• Experience: 10+ years experience in information technology or information security, aerospace industry background is a plus.

Ability

Soft Skills:

• Outstanding communication and presentation skills

• Fluent in Chinese and English, both in speaking and writing.

• An analytical mind with excellent problem solving abilities.

• Stakeholder management skills.

Technical Skills:

• Broad experience and knowledge of information technology.

• Rich knowledge on cyber/digital technologies and principles.

• Risk management skills.

• Digital security audit skills.

• Security awareness and training skills.