Sr IT risk control specialist 资深IT风控专员

到岗时间：不限 婚况要求：不限 职责描述：Manage and improve IT risks and information security within the organization, covering: 管理和改善组织内的IT风险和信息安全，包括:Conduct IT Risk assessments, to look at information security areas, identifying risks and potential improvements, working with related departments to mitigate risk and improve security level; 进行IT风险评估，查看信息安全领域，识别风险和潜在改进，与相关部门合作，降低风险，提高安全水平;Develop security training programs for staffs to increase the company level awareness; 制定员工安全培训计划，提高公司安全意识;Lead business continuity management, including business impact analysis, BCM risk assessment, rehearsal event ect. 领导业务连续性管理，包括业务影响分析，BCM风险评估，预演活动等。Take key responsible for IT Risk or information security reporting to CBRC/PBOC and other Chinese regulatory bodies主要负责向银监会/中国人民银行和其他中国监管机构报告IT风险或信息安全。Support activities surrounding internal or external audits as and when required在需要时支持内部或外部审计活动。Other duties as the managements may from time to time required管理层要求的其他职责。任职要求：Bachelor degree or above. 本科及以上学历。Broad knowledge or understanding of ISO27001, COBIT, and system level protection are an advantage. 具有ISO27001、COBIT和系统等级保护的广泛知识或理解者优先。More than 5 years relevant working experience 5年以上相关工作经验。Written and verbal English, Microsoft office application skills. 英语读写能力，熟练使用微软办公软件。Analytical skills, Attention to detail, as reporting to Audit function在向审计部门报告时具备分析技巧，注意细节。Strong time-management skills, ability to manage own diary ensuring that all reviews are complete. 较强的时间管理能力，能够管理自己的日志，确保所有的回顾都完整。Tenacity - desire to ensure that action is completed to a satisfactory position. 坚韧-渴望确保行动完成到一个令人满意的程度。Team working – Enable to gain support from Management team to improve processes and be willing to defend review findings. 团队合作-能够获得管理团队的支持以改进流程，并能就审计结果进行有效沟通。