北京招聘

Description

- Implement & monitor information security controls within the established information security framework and guidelines
- Hands on threat & vulnerability management on networks, systems and application using various tools & defined processes
- Perform gap assessments & remediation work on applications, IT infrastructure components, network, and other related business processes against Payment Card Industry Data Security Standard (PCI DSS) requirements
- Recommend suitable security controls to reduce the level of risk and address compliance gaps especially around PCI requirements
- Perform security risk assessments and reviews on web applications, business applications and related infrastructure as required
- Support security incident response and management work as required
 Ensure end point security compliance against requirements for patching, AV and other protection requirements.
- Lead or participate in vulnerability mitigation by engaging and working with appropriate business and IT teams
- Represent the Security organization in cross-functional or special projects and new initiatives as assigned
- Promote data security awareness through helping develop and maintain a security-conscious environment. Provide inputs to the security awareness program
- Coordinate with internal departments and communicate technical security concepts in business terms


 

Qualifications - External

- Bachelor of Information Technology / Bachelor of Science or its equivalent
- Industry certification in Information security such as CEH, CISSP, GIAC, or equivalent will be advantageous
- Operational knowledge of Threat & vulnerability management tools such as nCircle, Qualys, TripWire, Tufin, SPLUNK, RSA 2FA, CycberArk, Symantec End - - - Point Protection (SEP), Archer, VM & Citrix security are highly desirable
- Strong knowledge of IT security frameworks (ISO, NIST ec) and related processes
- Experience in PCI compliance programs with a strong knowledge of PCI data security standard (PCI DSS) and requirements
- Strong knowledge of application security & OWASP framework
- Able to quickly assess applications and IT infrastructure, recommend controls to reduce the risk level and compliance gaps
- Independent with proven analytical and project management skills
- Able to develop new skills or improve existing skills to keep up with advances in information security
- Able to translate technical security issues into appropriate audience language
- Excellent communication skills both verbal and written
- Must have experience working in a global or regional environment

企业使命
嘉信力旅运（CWT）凭借其跨越全球的专业团队与卓越的服务，致力于为企业商务旅行以及会议与活动管理项目提供高效、创新的解决方案。同时为商务旅行人士提供一流的服务与协助。

商务旅行
商务旅行是企业成功的制胜之道之一。旅行者是否能在旅途中获得必要的协助，保持高效率的工作与安全？商务旅行买家是否能够获得及时资讯或应用有效工具，快速适应不断变化的内部与外部环境，都是决定商务旅行成功与否的关键因素。审时度势，嘉信力旅运通过一系列定制的产品，专注于提供旅行者服务和商务旅行管理服务。与此同时，嘉信力旅运也是能源、资源与海洋领域商务旅行服务的专家。

会议与活动
致力于通过会议与活动拓展您的业务，激发与会者的创见与灵感。

您是否期望在创造力与成本节约之间取得平衡？我们责无旁贷，通过遍布全球超过75个国家的业务覆盖，为您带来全球领先的会议与活动服务以及强大的当地谈判与议价能力。

嘉信力旅运会议与活动业务涵盖四大领域：
活动
会议场所
团队旅行
战略会议管理

每个人左脑与右脑的思维方式都有所不同，我们期望双边的平衡与和谐共处，为客户提供全面的服务。左脑的思维方式帮助客户规划、汇报并节约成本。右脑的思维方式则以构思与创新令人耳目一新。

中航嘉信商务旅行管理有限公司
自1996年起，嘉信力旅运与中国航空服务有限公司（CAS）一直保持着良好的合作关系，共同为多家中国市场的跨国企业提供差旅服务。2003年1月两家公司更是进一步展开合作，成立了合资公司。

中航嘉信商务旅行管理有限公司总部位于中国北京，并在上海、广州、眉山（四川）、天津分别设有分公司。中航嘉信还专门成立了中航嘉信（北京）旅游有限公司，专业提供高效创新的战略会议与活动管理方案。中航嘉信目前共有700多名员工。



Company Mission
CWT delivers efficient and innovative solutions for business travel and meetings and events management, by leveraging our global reach with the best people and superior service. The company also provides best-in-class service and assistance to travelers.

Business Travel
Business travel is a key driver for getting things done. However, its effectiveness is dependent on travelers receiving the support they need to be productive and safe during their trips, and on travel buyers having access to information and tools to quickly adapt to ever-evolving internal and external dynamics. That’s why CWT organizes itself around Traveler Services and Program Services, with a variety of products and services tailored to the specific needs of each. We also offer specialized travel services to the dedicated sector of Energy, Resources & Marine.

Meetings & Events
Helping you deliver inspiring events and business results.

You want creativity and cost control. That’s where we can help. With feet on the ground in over 75 countries around the world, we bring you the local negotiating power and world meetings and events expertise you’re looking for today.

CWT Meetings & Events specializes in four areas:
Events
Venue sourcing
Group travel
Strategic meetings management

Everyone has left brain and right brain thinking. We all need a bit of both. And we offer both to you. Our left brain thinking to help you with the logistical elements of planning, reporting and cost-saving. And from the right brain side we offer you creativity, innovation and those impactful event experiences.

CWT China
CWT and China Air Service (CAS) have been working together to provide travel management services to multinational companies in China since 1996. This partnership was strengthened in January 2003 when the two companies established a joint venture.

CWT China is headquartered in Beijing with branch offices in Shanghai, Guangzhou, Meishan (Sichuan) and Tianjin and a total of 700+ employees. CWT China established CWT Meetings & Events to provide innovative, effective solutions for both strategic meetings and event management.