锦鲤求职岗位描述
Responsibilities：
1．Identifying key business priorities and risks to inform security strategies for protecting business information assets
2．Maintaining understanding of the security architecture stack and links/gaps to business protection priorities
3．Developing and managing security architecture plans and security policy, standards and procedures
4. Participating in the enterprise IT architecture community and providing strategic security guidance during the architectural process
5. Performing research, evaluations and develop recommendations and plans for the implementation of new or updated information security technologies
6. Coordinating and Developing IT Security Standards, policy, and process:
· In collaboration with Infrastructure, lead/participate in development of security architectures, baselines and standards for each major type of infrastructure component (e.g., Network-Firewalls, Routers, Logging; Physical Servers, Virtual Servers, End-User Compute, Mobile, etc.)
· Developing and maintaining a common set of security tools/security architecture
· Researching threats and vulnerabilities and, where appropriate, collaborate with internal and external IT partners to take action to mitigate threats and remediate vulnerabilities.
7. Security project implementation consultation and/or execution- Antivirus, Data Loss protection, Network Access Control, Breach Recovery, and Disaster Recovery Planning
Requirements：
1. Bachelor’s Degree in IT, Computer Science, Business, Engineering or related field preferred. An advanced technical degree or other applicable graduate degree (MBA) is highly desirable and/or equivalent security certification (CISSP, CISM, CISA. CEH, GIAC, etc.)
2. Experience with Information Security standards frameworks such as NIST CSF, ISO 2700X and SANS CSC for Information Security Governance, Controls and Risk Assessments.
3. Experience with Security Program, Governance, Architecture and Operations