南京招聘

职位描述：
Report line: Director Information Security, Global IT - Information Security

Purpose
To increase Security around current and all future solution, this is to be done by testing, training and awareness. To consult with regard to security in the area of architecture, designs, and planning both within the group and externally

Key Accountabilities
? Senior IT Security Consultant with a focus on Application Security.
? Roles and Responsibilities
? Create, maintain and drive technology strategies and roadmaps within the area of the responsibility, e.g. Application Security
? Create, maintain and implement Security policies, standards and guidelines applicable to application security
? Execute penetration-testing assessments on applications (Standalone, web and mobile) and devices.
? Review source code for security vulnerabilities and support developers on remediation activities
? Consult and assist stakeholders with mitigation and remediation efforts from penetration testing results
? Consult various stakeholders, like IT, business and 3rd parties on implementation of security controls and measures.
? Assist in driving security awareness to the end users through presentations and classes.

Communication
? Use appropriate and effective communication methods in order to successfully deliver and embed the project within the organization.

Knowledge, Capabilities and Experience
? Sound knowledge of information security principles & technical security controls
? Strong and demonstrable analytical skills
? Specialist knowledge in one or more of the following areas:
? Web application security
? Mobile application security (Android, iOS, Windows)
? End point security
? Wireless security
? Network security
? Encryption
? Application programming
? Penetration testing certification is a plus
? General knowledge of information security, including infrastructure security, application security, identity and access management, compliance frameworks, and other regulatory requirements such as PCI and SOX.
? Application programming experience
? Java, PHP, .NET, Ruby, JavaScript, HTML, XML
? Comfortable leading a small team of penetration testers

Qualifications

1. At least 5 years of technology experience as a penetration tester
2. At least 3 years in application development
3. Thorough knowledge of internetworking, including TCP/IP, IPsec, routers, IP internetwork configuration and design.
4. Substantial knowledge of information security practices and technology
5. Basic level of understanding in Compliance (PCI, CoBIT)
6. Experience with standards work in security, such as ISO, ANSI, IETF, etc.
7. Good Project management skills 举报 分享

adidas is a global leader in the sporting goods industry with the core brands adidas and Reebok. Headquartered in Herzogenaurach /Germany, the company employs more than 56,000 people across the globe and generated sales of EUR 21 billion in 2017. In Greater China, the company employs more than 5,700 people and generated sales of over EUR 3.7 billion in 2017.
adidas China was founded in 1997 and headquartered in Shanghai, one of adidas’ six key cities across the globe. With a population of 24 million, Shanghai is the largest city in China – and eighth largest in the world. It's the country's most important center for culture, commerce, and industry. Sometimes referred to as the "Paris of the East'," Shanghai prides itself for being a fashion capital as well.
Shanghai is also the headquarter of adidas Asia-Pacific market which is crucial to achieving the brand’s mission to be the best sports company in the world.