Information security analyst-Medical Device Industry

Michael Page

The candidate's primary responsibility is to facilitate the advancement of information and cyber security across the China region. The candidate will work with relevant stakeholders to develop and implement an appropriate enterprise security governance program across the region to protect information assets, to proactively address compliance and regulatory requirements, and to support the organization's security posture.

Implement/support implementation of security initiatives set by the Global InfoSec Strategy. Monitor progress and escalate issues as and when required;
Support risk management activities on information and cyber security in China region;
Promote global information security policies(OGR) and update China local (CNR)accordingly;

Organize Classroom training & develop e-learning and other awareness program to promote security culture in China;

Support InfoSec assessment for global project launching in China, as well as local projects / IT system / activities;
Support the development and operation of cyber-related business continuity program in the region
Collaborate with Global SIRT(security incident response team) and support China SIRT activities, enhance the regional incident response process.
Regularly assess the security environment and monitor changes in market and regulatory requirements in China region to enable timely adjustments to our enterprise security govern program and to provide security advisory to Business and Functional stakeholders.
Support internal and external audit and certification requirements (DJSI requirements on information/cyber security, NIST/ISO 27001 certification etc.).

Global business company|Work and life balance

Familiar with common information security management frameworks such as ISO 27001, COBIT and NIST.
Broad experience in information and cyber security (security governance, risk management, incident management and response, business continuity, etc.).
Effective communicator and able to interpret and explain security issues and concepts to both technical and non-technical audiences.
Experienced working in a matrix environment and with multi-cultural cross-functional teams.

Strong interpersonal and stakeholder management skills.