长沙招聘

工作职责:

1. Establishes and maintains strong relationships with IT and Business group leaders to understand goals, programs and strategic objectives.

2. Establishes and maintains the Corporate IT policies and processes, working closely with IT leadership team to institutionalize the responsibilities and procedures.

3. Engages in establishing and developing in-depth knowledge of WuXi Information Security policies, processes and procedures, as well as compliances processes and initiatives in order to provide subject matter expertise and guidance to other organizations (Commercial, R&D, Internal Audit, Compliance, Legal, HR, QA, etc.) within WuXi.

4. Work with various internal and external groups to ensure that information security policies, procedures and practices are properly implemented within IT and Business programs. Evaluates and articulates program security requirements, identifies potential security risk factors and business impacts.

5. Review IT and Business programs, projects and initiatives from inception, throughout the implementation, to end of life, to ensure that appropriate security controls are applied throughout the entire lifecycle.

6. Provides Information Security expertise and guidance to Business group leaders and IT Owners to ensure an appropriate balance between security and business enablement for identified business programs.

7. Reviews current IT and information security policies and practices for continued applicability with respect to WuXi commercial and R&D business programs. Provides recommendations for improvements.

8. Coordinate and conduct relevant security trainings and awareness program to IT, business and 3rd party teams on-demand basis.

9. Plan and execute critical applications/infrastructures and 3rd party vendors security assessment on-demand basis

10. Drive and follow up execution of key Information Security process and change management

11. Develop & maintain Information Security related metrics

12. Recommend improvements to IT Security controls based on thoughtful analysis of key metrics

13. Provide project management expertise, oversight, and guidance for Security related IT development/maintenance projects

14. Provide trend reporting for both IT Operations as well development teams on both internal and external IT Security related threats.

15. Ensure the integrity of all information systems and corporate information through the implementation and maintenance of established system management practices and control

16. Participate in IT related client audit, regulator audit and other 3rd party audit.

17. Participate in IT internal audit to ensure compliance with internal polices and processes.

18. Perform other duties as assigned

任职资格:

1. Minimum of 3-5 years of experience in Information Security, Information Assurance, or a Cyber Security role, pharmaceutical industry experience is a plus.

2. Experience in policy and process related document record maintenance.

3. Experience working with networks, Windows and MAC platforms

4. Experience with data analysis and analytics, including metrics development

5. Experience working and supporting multi-factor authentication systems

6. Experience supporting security awareness platforms

7. Demonstrated good judgment and decision-making ability

8. Excellent read and written communication skills both English and Chinese.

9. Good coordination and interpersonal management skills, must be able to work independently with minimal supervision, as well as collaborate in a professional and courteous manner with individuals of various levels within and outside the organization.

10. Good at Microsoft Office (PPT, Excel, Word and Outlook) documentation

11. Good knowledge of ISMS, ISO27001, HIPAA, SOX, COBIT, ITIL, Cyber Security Law of the PRC, OECD or GxP regulations is strongly preferred.

12. Industry Standard Information Security certification such as CISSP, CISA, CISP from a nationally recognized organization strongly preferred.

药明康德是国际领先的开放式能力与技术平台公司，为全球制药及医疗器械等领域提供从药物发现、开发到市场化的全方位一体化的实验室研发和生产服务。本着以研究为首任，以客户为中心的宗旨，药明康德通过高性价比、高效率的服务平台帮助全球客户缩短药物及医疗器械研发周期、降低研发成本。药明康德平台涵括化学药研发和生产、细胞及基因疗法研发生产、药物研发和医疗器械测试等，正承载着来自全球30多个国家的3500多家创新合作伙伴的数千个研发创新项目，致力于将最新和***的医药和健康产品带给全球病患，实现“让天下没有难做的药，难治的病”的梦想。