Information Security & Data Protection Auditor_C
工作模式
在工地的
工作领域
信息技术
加入为
专业人员
工作时间
全日制
合同类型
有限期
赔偿
根据协议
你的任务
- Execute information security and privacy audits according to the established audit plan and methodology.
- Conduct audit interviews, collect and evaluate audit evidence, and assess the design and effectiveness of security and privacy controls.
- Perform audits covering information security governance, identity and access management (IAM), cloud security, vulnerability management, logging and monitoring, endpoint security, data protection, incident response, third-party security, and privacy compliance.
- Identify security and privacy risks, document audit findings, support the preparation of audit reports, and provide practical remediation recommendations.
- Track remediation progress and verify the effectiveness of corrective actions.
- Collaborate with business, IT, Legal, Compliance, Privacy, and other stakeholders to facilitate audit activities and promote continuous improvement of security controls.
- Support the continuous improvement of audit methodologies, templates, and knowledge repositories.
- Keep up to date with emerging cybersecurity threats, privacy regulations, and industry best practices.
您的个人资料 - Bachelor's degree or above in Information Security, Computer Science, Information Systems, Cybersecurity, or a related field.
- Minimum 3 years of experience in information security auditing, IT auditing, data protection auditing, cybersecurity, or related areas.
- Hands-on experience in security control assessment, risk identification, audit evidence analysis, and remediation verification.
- Solid technical understanding of one or more of the following areas: Identity and Access Management (IAM), cloud security, network security, vulnerability management, logging and security monitoring, endpoint security, data protection and encryption, incident response, and third-party security.
- Familiarity with privacy protection principles, personal data lifecycle management, and relevant standards and regulations, such as ISO/IEC 27001, ISO/IEC 27701, TISAX/VDA ISA, GDPR, PIPL, and ISO 9001.
- Professional certifications such as CISA, CISSP, CISM, ISO/IEC 27001 Lead Auditor, ISO/IEC 27701 Lead Auditor, CIPM, CIPP, or CDPSE are preferred.
- Proficient in written and spoken English, with the ability to use English as the working language for meetings, audit interviews, documentation, and communication.
- Strong analytical thinking, communication, and cross-functional collaboration skills; detail-oriented, self-motivated, and capable of supporting audit projects simultaneously.
- Bachelor's degree or above in Information Security, Computer Science, Information Systems, Cybersecurity, or a related field.
- Minimum 3 years of experience in information security auditing, IT auditing, data protection auditing, cybersecurity, or related areas.
- Hands-on experience in security control assessment, risk identification, audit evidence analysis, and remediation verification.
- Solid technical understanding of one or more of the following areas: Identity and Access Management (IAM), cloud security, network security, vulnerability management, logging and security monitoring, endpoint security, data protection and encryption, incident response, and third-party security.
- Familiarity with privacy protection principles, personal data lifecycle management, and relevant standards and regulations, such as ISO/IEC 27001, ISO/IEC 27701, TISAX/VDA ISA, GDPR, PIPL, and ISO 9001.
- Professional certifications such as CISA, CISSP, CISM, ISO/IEC 27001 Lead Auditor, ISO/IEC 27701 Lead Auditor, CIPM, CIPP, or CDPSE are preferred.
- Proficient in written and spoken English, with the ability to use English as the working language for meetings, audit interviews, documentation, and communication.
- Strong analytical thinking, communication, and cross-functional collaboration skills; detail-oriented, self-motivated, and capable of supporting audit projects simultaneously.
