上海招聘

ESSENTIAL DUTIES & RESPONSIBILITIES:

1. Information Security Management -100%
- Define the strategy and plan to improve the organization security levels
- Evaluate the organization security risks and make plan for mitigation
- Conduct BCM analysis and define the BCP.
- Educate and train the staff to be aware about the security process
- Establish the measurement system to evaluate the effectiveness of security controls
- Lead and coordinate with other department to implement the security controls.
- Work closely with IT department to monitor security events for computer virus, hacking, security breaches and malicious activities
- Work closely with IT department to deal with security incidents and develop prevention plan
- Provide suggestion/ solution according to customer security requirements and work closely with related team to Implement it
- Monitor the security bulletin to know the new security vulnerability, evaluate the risk and implement the controls
- Improve the security process based on the business needs
- Implement internal security audit and cooperate with external auditors or customer for external audit
- Integrate customer security requirements into company security process, define specific security policy for new ODC team
- Implement new security standard like PCI, SAS70, SOX to meet organization business goal


REQUIRED QUALIFICATIONS:

1) Competencies: Skills, knowledge, & abilities

Functional Competencies:
- Good understanding of security management systems and knowledge, like Firewall, IDS/IPS, Anti-virus, Operation System, Database, TCP/IP etc
- Knowledge on security standard, like ISO27001, ISO20000, PCI, SAS70, SOX etc.
- Knowledge on various kinds of international famous Information Security Products and solutions.
- Good presentation and documentation skill

Interpersonal Competencies:
- Strong analytical and organizational skills
- Must be able to work in a fast-paced yet structured environment, communicate concisely and clearly to all levels of the organization, and be willing to drive quality into the development process
- Show initiative and drive
- Demonstrate ability to acquire understanding and absorb new information rapidly; a "quick study."
- Strong problem-solving skills to address complex problems within the technical arena and develop creative and practical solutions
- Capable of multi-tasking
- Team player with strong people skills
- Must consistently project a professional attitude
- Escalate issues appropriately to senior management
- Excellent communication skills

Leadership Competencies:
- Strong confidence, positive working attitude and work with passion;
- Good leadership and influence;
- Excellent stress management skill;
- Excellent time management skill for multiple tasking;
- Demonstrate integrity, maturity and a constructive approach to challenges.
- Make decisions using good judgments that are in line with strategy and understand how projects fit into overall development strategy and process.
- Demonstrate respect, responsiveness and professionalism toward others while providing superior service for customers

2) Experience:
- Must have at least 5+ years experience in Information Security area, with 2+ year experience in a ISO27001 certificated company
- Must have at least 2+ year experience with IT system maintenance & configuration like network management, server maintenance etc
- Must have at least 2+ year experience with ISO27001 compliance process implementation
- Must have a working knowledge of security process improvement
- Must have the knowledge of PCI, SOX, SAS70
- Knowledge of BS25999, ISO20000, ITIL is a plus
- CISSP, CIW, CISP, CISA certificate is a plus

3) Minimum educational level:
- B.S. Computer Science or equivalent

博朗软件开发（上海）有限公司成立于2001年，是美国独资、领先的离岸软件开发公司，为美国和欧洲的金融、电子商务、新兴产业内知名公司和其他独立软件供应商提供高附加值的软件开发服务。
通过为客户提供基于长期合作关系的软件开发和维护服务，并拥有先进的技术和符合CMMi-level 5和ISO27001规范的管理流程，博朗软件为员工提供了非常稳定的软件开发环境。
博朗软件注重员工的个人发展，为员工持续提供所需的各种培训课程，也建立了贯穿员工职业生涯的导师制度和提升机制，并且为员工的内部岗位轮换提供了机会。快速发展的博朗软件同时也给诸多优秀员工提供了快速职业发展机会，使之成长为技术骨干及管理者。
除了系统专业的技术培训、研讨外，公司致力于不断提升员工的英语应用水平，提供100%英语工作环境，由专职英语外籍教师根据员工不同的英语水平设计相应的培训课程，并提供实时地技术英语支持。
由于客户多在欧美国家，员工会有大量派遣到海外培训与工作的机会，公司同时也会邀请海外客户到公司进行现场培训和指导。
工作之余，员工能够参与公司定期举办缤纷多彩的社交活动和充满乐趣的体育文化项目，丰富自己的业余生活。

随着公司业务持续迅速增长，我们需要更多的同伴来帮助我们一起达成梦想。博朗软件真诚地欢迎您的加入！

博朗软件目前有大量工作机会等待您的查询和应征。您只需要投递简历，我们将会尽快与您取得联系。
有关博朗软件的更多信息请访问博朗软件的官方主页：www.bleum.com

更多及时信息您也可以访问新浪认证微博：博朗软件。

邮件联系：recruiters@bleum.com