Cyber Security Engineer

We are looking for a candidate with experience in Information Security Management System (ISMS) operations and IT compliance. The main role is to participate in the company's overall IT GRC planning and to help different global sites to implementations information security controls and handle external audits.

Key Responsibilities:

1. Operate and maintain the Information Security Management System (ISMS) at the headquarters and manufacturing sites and make sure each site can keep its ISO 27001 certification and meet the requirements of NIST CSF v2.0.

2. Help respond to supply chain audits from key customers. Also help the headquarters and global overseas sites design management processes to bring customer requirements into daily management activities.

3. Support AI Governance related work. This includes assisting in the development of AI usage policies and assessing the risks of implementing AI tools.

4. Help the headquarters and global sites design information security incident reporting processes and carry out reporting drills.

5. Provide advice on internal control and cybersecurity technology issues for IT colleagues.

Required Qualifications:

1. 3 to 5 years of experience in information security related work.

2. English level must be good enough to communicate with non-Chinese speakers.

3. Must have experience in building an Information Security Management

4. System (ISMS) and maintaining ISO 27001 certification.

5. Must be willing to travel both domestically and internationally.

6. Familiar with Microsoft Office(Excel, PowerPoint, Word, Outlook).

7. Must have ISO 27001 LA, CISA, or CISM.

8. Curious and eager to explore new technologies and AI, strong problem-solving skills, and good at communicating with people.

Preferred Qualifications:

1. Candidates with information security work experience in the high-tech manufacturing industry will be given priority.

2. Having CISSP, CCSP or other cloud/AI certificates is a plus.