锦鲤求职岗位描述
Job Description:
Execute information security and privacy audits according to the established audit plan and methodology.
Conduct audit interviews, collect and evaluate audit evidence, and assess the design and effectiveness of security and privacy controls.
Perform audits covering information security governance, identity and access management (IAM), cloud security, vulnerability management, logging and monitoring, endpoint security, data protection, incident response, third-party security, and privacy compliance.
Identify security and privacy risks, document audit findings, support the preparation of audit reports, and provide practical remediation recommendations.
Track remediation progress and verify the effectiveness of corrective actions.
Collaborate with business, IT, Legal, Compliance, Privacy, and other stakeholders to facilitate audit activities and promote continuous improvement of security controls.
Support the continuous improvement of audit methodologies, templates, and knowledge repositories.
Keep up to date with emerging cybersecurity threats, privacy regulations, and industry best practices.
Job Qualification:
Bachelor's degree or above in Information Security, Computer Science, Information Systems, Cybersecurity, or a related field.
Minimum 3 years of experience in information security auditing, IT auditing, data protection auditing, cybersecurity, or related areas.
Hands-on experience in security control assessment, risk identification, audit evidence analysis, and remediation verification.
Solid technical understanding of one or more of the following areas: Identity and Access Management (IAM), cloud security, network security, vulnerability management, logging and security monitoring, endpoint security, data protection and encryption, incident response, and third-party security.
Familiarity with privacy protection principles, personal data lifecycle management, and relevant standards and regulations, such as ISO/IEC 27001, ISO/IEC 27701, TISAX/VDA ISA, GDPR, PIPL, and ISO 9001.
Professional certifications such as CISA, CISSP, CISM, ISO/IEC 27001 Lead Auditor, ISO/IEC 27701 Lead Auditor, CIPM, CIPP, or CDPSE are preferred.
Proficient in written and spoken English, with the ability to use English as the working language for meetings, audit interviews, documentation, and communication.
Strong analytical thinking, communication, and cross-functional collaboration skills; detail-oriented, self-motivated, and capable of supporting audit projects simultaneously.