北京招聘

Official Title: IT Security Manager

Location: Shanghai Xinzhuang (shuttle bus provided)





Purpose of the position:

·Perform two core functions for the enterprise.

·The first is overseeing the operations of the enterprise's security solutions through management of the organization's security analysts.

·The second is establishing an enterprise security stance through policy, architecture and training processes. ·Secondary tasks will include the selection of appropriate security solutions, and oversight of any vulnerability audits and assessments.

·The IT Security Manager is expected to interface with peers in the Systems and Network departments as well as with the leaders of the business units to both share the corporate security vision with those individuals and to solicit their involvement in achieving higher levels of enterprise security through information sharing and co-operation.




Responsibility:

A.Strategy & Planning

·Create and maintain the enterprise's security architecture design.

·Create, and maintain the enterprise's security awareness training program.

·Create and maintain the enterprise's security documents (policies, standards, baselines, guidelines and procedures).

·Create and maintain the enterprise's Business Continuity Plan and Disaster Recovery Plan, where appropriate.



B.Acquisition & Deployment

·Maintain up-to-date knowledge of the IT security industry including awareness of new or revised security solutions, improved security processes and the development of new attacks and threat vectors.

·Select and acquire additional security solutions or enhancements to existing security solutions to improve overall enterprise security as per the enterprise's existing procurement processes.

·Oversee the deployment, integration and initial configuration of all new security solutions and of any enhancements to existing security solutions in accordance with standard best operating procedures generically and the enterprise's security documents specifically.



C.Operational Management

·Ensure the confidentiality, integrity and availability of the data residing on or transmitted to/from/through enterprise workstations, servers and other systems and in databases and other data repositories.

·Ensure the enforcement of enterprise security documents.

·Supervise all investigations into problematic activity and provide on-going communication with senior management.

·Supervise the design and execution of vulnerability assessments, penetration tests and security audits.

·Perform regular security awareness training for all employees to ensure consistently high levels of compliance with enterprise security documents.

·Engage in ongoing communications with peers in the Systems and Networking groups as well as the various business groups to ensure enterprise wide understanding of security goals, to solicit feedback and to foster co-operation.




Requirements:

·College diploma or university degree in the field of computer science and/or 5 years equivalent work experience.

·One or more of the following certifications:

o GIAC Security Essentials Certification

o GIAC Security Leadership Certification

o ISACA Certified Information Security Manager

o Microsoft Certified Systems Engineer: Security

o (ISC)2 SCCP

o (ISC)2 CISSP

o (ISC)2 ISSAP

· Extensive experience in enterprise security architecture design.

· Extensive experience in enterprise security document creation.

· Experience in designing and delivering employee security awareness training.

· Experience in developing Business Continuity Plans and Disaster Recovery Plans.

· Experience in managing of staff of 5 to 100 individuals

· Experience in data center, network and client services and operation

· Working technical knowledge of front end and back end environment

· Working technical knowledge of encryption solution

· Strong understanding of IP, TCP/IP, and other network administration protocols.

· Familiarity with qualys, ePO, SCCM, WSUS, and other control system

·Familiarity with ERP application such as kingdee, UFida or SAP

· Proven analytical and problem-solving abilities.

· Ability to effectively prioritize and execute tasks in a high-pressure environment.

· Good written, oral, and interpersonal communication skills.

· Ability to conduct research into IT security issues and products as required.

· Ability to present ideas in business-friendly and user-friendly language.

· Highly self motivated and directed.

· Keen attention to detail.

· Team-oriented and skilled in working within a collaborative environment.

· 40-hour on-site work week with on-call availability for 5 days per month.

· 30-40 % travel required.

· Sitting for extended periods of time.

· Sufficient dexterity of hands and fingers to efficiently operate a computer keyboard, mouse, power tools, and other computer components.


Mini Education level:College

Major preferred:Computer Science

Language skills:English Excellent

Minimum years in employment:5 years
Preferred industry experience: Computer Science related




Thank you for your interest in Evonik Degussa China! For understandable heavy workload reasons, we only invite qualified candidates for further discussion in 4 weeks time. ALL application and information will be kept highly confidential and only for recruitment purpose!

Evonik and Evonik in Greater China

Evonik, the creative industrial group from Germany, is one of the world leaders
in specialty chemicals. Its activities focus on the key megatrends health and nutrition, resource efficiency and globalization. In 2010 about 80 percent of the Group’s chemicals sales came from activities where it ranks among the market leaders. Evonik benefits specifically from its innovative prowess and integrated technology platforms. Evonik is active in over 100 countries around the world. In fiscal 2010 more than 34,000 employees generated sales of around EUR13.3 billion and an operating profit (EBITDA) of about EUR2.4 billion.

Evonik Industries has been producing specialty chemical products in the Greater China region (Mainland China, Hong Kong and Taiwan) since the late 1970’s; with wide-ranging trading relations already in place prior to this in the region. The Group now has a total of 18 companies and 15 production sites in the Greater China region with around 4,000 employees. The regional sales reached EUR1.23 billion in 2010.

Evonik regards Greater China as one of the driving forces of the global economy and we consequently endeavor to grow our business in the region. Evonik launched the "Greater China Growth Path” initiative in the fall of 2008, a strategic development plan with comprehensives measures for regional business development. Based on this initiative, Evonik has started a number of cross business unit projects for some key industries such as automotive, construction, electronics and lighting, etc. Several strategic investment projects are also under way in the region to ensure that the growth trajectory continues in the long term. Besides the investment into production facilities, Evonik also wants to strengthen its R&D efforts in the Greater China region by boosting local innovation.

Evonik regards people as the most important assets for our sustainable growth. Wherever possible, we aim to fill key positions with highly qualified local managers and offer them attractive career opportunities in the Group. In December 2010 the international publishing company CRF singled out Evonik as one of “China’s Top Employers 2011”, which is already the fourth time that Evonik China received this award.

赢创与赢创大中华区简介

 

赢创是一家来自德国的创新型工业集团，我们的核心业务 —— 特种化工在全球处于领先地位。我们将业务与全球大趋势相结合， 即能源效率、健康与营养、全球化科技发展。2010年，集团80% 的销售额都来源于市场领先的化工产品。赢创的发展得益于其创新实力和一体化技术平台。赢创的业务遍及全球100多个国家。在2010财年，赢创集团的34, 000余名员工创造了133亿欧元的销售额， 营业利润 (税息折旧及摊销前利润) 达24 亿欧元。

 

赢创工业集团自上世纪七十年代末期开始在大中华区（包括中国大陆、香港和台湾）生产特种化工产品，并早在此之前就在这一地区有了广泛的业务活动。目前，赢创在大中华区拥有18 家公司，15 个生产基地。2010年，赢创大中华区约有4,000名员工，总销售额超过12.3亿欧元。

 

赢创视大中华区为推动全球经济发展的驱动力之一，并为实现业务在大中华持续增长而不断努力。公司于2008年秋天启动了战略发展计划 “大中华区增长之路”，以全面推动发展本地区业务。作为这一战略的重要组成部分，赢创启动了针对多个主要市场的跨业务部门项目，如汽车、建筑、电子与照明等。为确保公司在本地区的持续稳定增长，我们也正开展多个战略投资项目。除投资生产设施外，赢创同样通过扩大本地创新活动，提升其在大中华区的研发实力。

 

人才是我们实现可持续增长的最重要资产，我们不断培养高素质的本地经理担任公司的重要职位，并为其提供在集团的职业发展机会。2010年12月，赢创荣获由国际调研机构CRF颁发的 “2011中国杰出雇主” 荣誉，这也是赢创中国第四次获得这一全球领先的人力资源奖项。