信息安全工程师

AI 摘要智能生成

具备完整 ISO27001 信息安全管理体系全流程落地实操经验

职位描述

1. 具备完整 ISO27001 信息安全管理体系全流程落地实操经验，独立参与或主导体系搭建、资产梳理、风险评估、文件编制、内审、管理评审、认证审核、年度复审全流程工作 2. 有跨部门体系推行落地经验，可组织安全培训、督促各部门落实体系管控要求，处理体系不符合项整改 3. 根据公司业务场景优化安全控制措施，持续维护 ISO27001 体系长效运行 1. Hands‑on practical experience in the full‑cycle implementation of the ISO27001 information security management system. Independently participated in or led the whole process including system establishment, asset inventory, risk assessment, document compilation, internal audit, management review, certification audit and annual surveillance review. 2. Experience in cross‑departmental system promotion and implementation. Able to organize security training, supervise various departments to implement system control requirements, and handle rectification of non‑conformities. 3. Optimize security control measures according to business scenarios, and maintain the long‑term effective operation of the ISO27001 system continuously.

任职要求

• 负责公司全域 IT 基础设施、业务系统、数据资产的安全防护、风险管控与合规落地，搭建并运维网络、主机、应用、终端、数据多层安全体系；开展漏洞治理、安全监控、攻防检测、应急响应，落实等保
• ISO
• 网络安全法等法规标准，为研发、运维、业务部门提供安全技术支撑，持续降低企业网络攻击、数据泄露、系统入侵风险，保障信息资产机密性、完整性、可用性。
• Be responsible for security protection, risk management and compliance implementation of the company’s full‑scope IT infrastructure, business systems and data assets. Build and maintain a multi‑layer security system covering network, host, application, endpoint and data. Carry out vulnerability remediation, security monitoring, attack‑defense detection and emergency response. Implement regulatory standards including Class‑2 Protection
• 0, ISO27001 and Cybersecurity Law of the People’s Republic of China. Provide security technical support for R&D, operation‑maintenance and business departments. Continuously mitigate risks of cyber‑attacks, data leakage and system intrusion, and guarantee the confidentiality, integrity and availability of information assets.