IT Security Manager
咖世家咖啡(上海)有限公司
- 公司规模:1000-5000人
- 公司性质:外资(欧美)
- 公司行业:快速消费品(食品、饮料、化妆品)
职位信息
- 发布日期:2019-02-28
- 工作地点:上海-虹口区
- 招聘人数:若干人
- 工作经验:无工作经验
- 学历要求:招若干人
- 语言要求:不限
- 职位类别:其他 技术支持/维护经理
职位描述
Primary purpose of role:
- Responsible for Information Security across Costa China for all Costa Brands
- To lead the overall development, implementation and adoption of the Information Security Strategy and Information Security Management Systems and Operations (ISMS)
- To ensure all IT investments deliver appropriate security solutions to protect the business now and in the future across the Costa China, delivering sponsored initiatives to time and budget, ensuring future solutions are simple and easy to use and that Information Security is considered and addressed in all aspects of the businesses operations and ways of working.
- To manage Security Budgets in conjunction with the Finance department.
- To support overall strategy for and continuous improvement of the IT function for China.
- To bring knowledge and best practice around security to bring and keep Costa China in line with industry compliance, regulatory and standards guidelines as appropriate.
- Securing Costa China data at rest and in transit ensuring that consumption and reuse is accessed securely, is auditable and is within Chinese Regulatory and Legal compliance boundaries.
- Ensuring Information Security Awareness and suitable role based training is available for Information security across Costa and maintaining line of sight to embedded maturity of process and policy.
- Ensuring secure operations, run model and processes are in place and incident management is owned, clear and communicated.
Key Accountabilities:
Develop Information Security Strategy and embed within the business
- Develop an Information Security strategy ensuring it is in alignment with Costa China and Costa overall strategy
- Ensure across Costa China appropriate structures and governing bodies are in place to consider security issues and provide strong governance pertaining to all security matters
Lead overall Programme of Work to address information security across the Costa group
- Proactively plan and manage IT Security project activities within the Costa China IT Portfolio Roadmap for UK and International.
- Proactively plan overall security resource requirement driven by projects
- Work with functional and Senior teams to ensure a coordinated approach to planning and implementation of appropriate security measure
Keep Costa Safe
- Ensure information security project objectives meet wider business needs to continually simplify and streamline IT and business processes, whilst reducing Information Security risks
- Ensure that information security risks are identified, communicated and mitigated so that the IT Leadership and Costa Board is kept fully informed of progress, and impact on external customers is minimised
- Influence project deliverables across the IT Portfolio to ensure they are compliant with ever increasing security requirements
Manage overall IT Security budgets and finances
- Contribute to overall budget and reforecast processes across IT
- Ensure security project budgets are regularly tracked and assessed and project activity has approved funding through appropriate governance forums
- Work with Finance to ensure all finance processes are followed across IT
- Participate in cost reviews and provide management reporting (in conjunction with Finance)
Manage relationships with key stakeholders in IT & across Costa
- Provide updates to Boards and senior stakeholders on overall security programme of work
- Work with stakeholders to agree scope, feasibility, business case, costs, project timeline and ensure projects are signed off
- Work with budget holders across IT to ensure budgets are defined and managed and include appropriate provision for security measures
Resourcing
- Establish the resourcing need for security expertise on project teams both internally and externally, driven by the project pipeline and investment budgets
- Establish appropriate cost effective sources for different types of resource
- Manage relationships with security partners and support commercial and contract negotiations with other partners
Ensure robustness of approach to security
- Manage the development and implementation of security governance processes across Costa
- Ensure IT portfolio is regularly reviewed and security approach assessed and validated for active projects
- Ensure continuous improvement of security processes, standards & tools
Implement the appropriate systems security, risk management processes across Costa to ensure robust solutions are in place that comply with operational and audit requirements
Key Performance Measures/Success Factors:
Projects delivered on time and to budget
Clarity on overall finance position for security
Achievement of business case benefits across security projects
Business and IT teams actively seek out the security team to help define future business requirement
Required knowledge, skills or experience
- Knowledge of security standards (IS 27000/COBIT) and their applicability to a Top 500 Chinese Enterprises
- Knowledge of security tools and processes
- Management of third parties specialising in information security and partnering with suppliers providing IT solutions and services with whom we rely on to provide information security on our behalf
- Formulation of Systems design to include information security that supports business objectives
- Leading and defining an Information Security Strategy, developing the roadmap and identifying and agreeing key priorities
- Member of a business Security Council/Board during a time of significant IT investment
- Management of both departmental IT budgets and programme budgets
- Supplier management and commercial negotiations
- Systems integrator experience on at least one major programme involving information security
- Sound judgement
- Strong team working skills inspiring trust and acting as a catalyst for success
Required knowledge, skills or experience
? Managing relationships between external partners and internal stakeholders
? Strong communication skills
? Strong negotiation skills
? Programme and Project management
? Commercial negotiations with procurement support
? Understanding of technology directions
? Supplier management
? Business case development, including Benefits tracking and realisation
公司介绍
咖世家咖啡在中国的足迹始于2006年上海的***家门店。如今,在中国,咖世家咖啡共有超过500家门店和几千名全职及非全职员工,共同致力于带给中国市场最棒的咖啡体验。2019年,咖世家咖啡加入了可口可乐的大家庭,我们期待着在未来能够让更多的消费者有更多的机会体验到来自咖世家的优质咖啡。
在咖世家咖啡,我们是这样一个真诚而温暖的团队,拥有对咖啡执着的热情,渴望为我们的顾客、社区和伙伴创造美好的体验,充满信任的环境使我们志向远大、敢为先行,与公司共成长。在快速发展的经济环境下,我们鼓励大胆的变革和勇敢的合作, 将新的想法付诸实践!
欢迎加入咖世家咖啡, 开启非凡职业之旅!
The Costa Coffee story began back in 1971, when two Italian brothers – Sergio and Bruno – arrived in London with a burning desire to make great tasting coffee a part of everyday life. In 1981 they opened the first coffee shop in the heart of London, from here the Costa family continued to expand across London, the UK and eventually the globe. There are now over 3,800 Costa Coffee shops in 32 markets, 8,000 express machines worldwide and over 3,000 Proud to serve partnerships in the UK.
Costa Coffee started its footprint in China in 2006 when the first Costa store was opened in Shanghai. Now there are over 500 Costa stores across China with several thousand Costa employees and partners dedicating to inspiring China to love great coffee. As Costa Coffee joined the big Coca-Cola family in 2019, we expect to grow into a coffee company serving great quality coffee to more people and more often.
At Costa, you’re part of a genuine and warm team that shares a passion for our coffee, and a desire to deliver great experiences to our customers, our communities and to our people. An environment of trust enables us to be bold in our aspiration and courageous in our actions to grow ourselves and our business. We‘re always asking how we can do better in our fast-paced and growing business and empowered to bring forward new ideas blended with a courageous collaborative spirit and bold transformative action.
Welcome to Join COSTA COFFEE & Start an Exceptional Adventure!
联系方式
- 公司地址:上海市虹口区四川北路1318号盛邦国际大厦30楼 (邮编:200080)
- 电话:13801664138