主要工作目的：

• 處理資訊安全方面專業事宜

• 負責保護信息資產的機密性，完整性和可用性，並與業務部門和外部供應商緊密合作
• Take responsibility for protecting the confidentiality, integrity and availability of information assets and, work closely with business units & external vendors
• 按事件/變更管理流程處理突發事件, 找出原因並進行改善
• Handle cases according to incident/change management guide, find the root casue and make enhancement suggestion
• 定期進行檢查和評估，以確保制定的IT安全程序得到遵守並有效運行
• Perform checks and assessment periodically to ensure that the IT security procedures developed are being adhered to and operating effectively
• 管理技術風險評估的監督，例如漏洞掃描和滲透測試
• Manage the oversight of technical risks assessments, such as vulnerability scanning and penetration testing
• 進行評估以識別安全風險並採取後續措施
• Conduct assessments to identify security risks and follow up mitigation items
• 參與審核/安全評估並提供諮詢意見以補救調查結果
• Participate in audits / security assessments and provide advisory to remediate the findings
• 支持IT安全技術和框架（例如NIST，ISO27001等）的開發和實施
• Support the development and implementation of IT security technologies and frameworks, i.e. NIST, ISO27001, etc.
• 支持開發針對中到復雜任務的安全解決方案
• Support to develop security solutions for medium to complex assignments
• 負責與安全運營中心和服務提供商的日常安全運營
• Responsible to daily security operation with security operation center and service providers
• 其他部門指派之工作
• Other assigned duty

• 任何IT相關學位
• Any IT related degree
• 至少有5年IT行業工作經驗，其中3年是IT安全領域的工作經驗；具有CISA，CISSP或其他認證是一個優勢
• At least 5 years of working experiences in IT industry with 3 years in IT security areas; Certified in CISA, CISSP or other recognized certificate is an advantage
• 熟悉防火牆，IPS，DLP，MDM，WAF，APT，SIEM，內容過濾，端點保護，反垃圾郵件，身份驗證，加密，源代碼查看工具以及主流IT安全技術和產品方面的技術
• Familiar with technologies on Firewall, IPS, DLP, MDM, WAF, APT, SIEM, content filtering, endpoint protection, anti-spam, authentication, encryption, source code review tool and mainstream IT security technologies and products
• 在管理供應商的IT運營，變更管理，事件管理，問題管理等方面具有豐富的經驗
• Solid experience in managing vendors on IT operations, change management, incident management, problem management, etc.
• 注重細節並具有分析心態
• Detail-oriented and have an analytical mindset