北京招聘

Key Responsibilities
Serve as the Company's authoritative point of contact for IT security information, for both IT and non-IT
organizations.Provide consultation and direction to IT and business organizations by responding to inquiries directed to IT Security.
Provide consult and guidance on IT vulnerability identification and assessment, compliance requirements, secure
computing practices
Perform, facilitate, and review SDL Threat Modeling
Evaluate security-related requirements for application and infrastructure deployments
Guide development teams to the utilization of enterprise strategic solutions. Coordinate security requirements across business organizations and recognize common needs with potential for strategic solutions (vs. tactical)
Serve as escalation point for all Security and Control Champions (SCC's).Support SCC learning activities and
experiential growth
Participate on the IT Policy Exception Review Board
Conduct research on IT security topics
Coordinate and assist in preparation of security requirements documentation and clarification of existing
security requirements
Identify projects where in depth IT Security SME involvement is required.
Collaborate on JV and business development efforts
Assist in special projects as required
All the above activities will mainly be conducted within AP region

ESSENTIAL SKILLS
Ability to work independently and advance multiple assignments concurrently
Attention to detail in both content and presentation of materials
Oral and written communication skills – to ensure efficient and effective communication with
remote regional contacts and with senior operating management
Ability to deal with cultural diversity of the AP region and global.
Able to model control behavior within the region and strong leadership skills to work as team.

Desired Qualifications
Education
Bachelor's degree in computer science, information technology, engineering or equivalent experience
in a relevant field.
Certification
CISSP, CISM, CISA, CRISC, CAP, Security+ or other industry recognized certification is desired.
Familiar with International IT Governance Frameworks, like COBIT, and/or Information Security Standards, like ISO 27001/2. ISO31000
Experience
5 to 7 years of progressive responsibilities in IT with at least 3 years’ experience in cyber
security incident handling, threat assessment, intrusion detection/protection and vulnerability management or in IT Security related disciplines.
In-depth understanding of security technology and broad technical experience.
Being able to keep up to date with the latest technologies, security information and potential
threats.
Broad experience in the application/infrastructure security environment and respective Company policies, procedures and tools.
Experience in managing, developing, and implementing enterprise IT and cyber security
policies and governance.

公司宗旨
打造更美好的世界，让每个人自由移动，追逐梦想
OUR PURPOSE
To help build a better world, where every person is free to move and pursue their dreams.


福特汽车公司作为全球汽车企业之一，提供包括设计、制造、销售高品质的轿车、SUV、卡车、电动车型、林肯品牌豪华车型及相关售后服务，并以先锋创新的品牌精神与Ford+发展计划为指导，建立全时全方位的新型客户关系，重振汽车业务，引领电气化革命，全面推进企业现代化，利用智能网联软件、数据和服务，不断提升客户体验。

今年正值福特汽车公司成立118周年之际，福特秉持“打造更美好的世界，让每个人自由出行，追逐现梦想”的宗旨，到2025年底在电气化业务方面全球投入300亿美金，ALL-IN电气化，并已成立全新电池创新中心Ford Ion Park，投资研发固态电池。面向L4级别自动驾驶，福特第四代自动驾驶测试车已上路，Blue Oval智能科技平台，携手苹果、亚马逊和百度等，打造更智能的生态系统。在Ford+发展计划的指引下，福特汽车正在驶入新的发展之路。