上海招聘

KEY RESPONSIBILITIES：
1. Collect the customer, project, company group and local government Information and Cyber Security requirements and perform feasibility analysis.
2. Convert the Information and Cyber Security requirements into conceptual designs.
3. Prepare Information and Cyber Security requirement specifications, interface requirements and test requirement documents by analyzing, decomposing modelling and refining customer requirements and typical system requirements.
4. Perform the testing and performance analysis to further optimize the Information and Cyber Security design.
5. Guide DCS engineers to deploy the Information and Cyber Security design correctly in the project and critical trouble shooting support.
6. Establish and maintain the integrated Information and Cyber Security simulation environment in Lab.
7. Share knowledge and train DCS engineers to grow up in security technical field.
8. Communicate with internal and external technical partners and supervise the technical work regularly.
9. Support the implementation of the Group Information and Cyber Security strategy and common Group Digital goals
10. Support the Information and Cyber Security and Data Privacy incident management process with your expertise.
11. Use the Risk Management Process to support the organisation to understand, identify and mitigate Information and Cyber Security risks,
12. Maintain a focus on 3rd party management including supporting with pre-assessments, needed requirements in contracts and continuous measurement activities
13. Keep updated on current and emerging trends, threats, tools and methodologies to maintain your knowledge
14. Optimize the cloud/network/DB security protection system, develop a landing network security plan, and design a reasonable security scheme and strategy

COMPETENCY REQUIREMENT：
1. Excellent understanding of Information and Cyber Security and related technologies.
2. Familiar with level protection regulation of China.Exposure to China Cybersecurity Law and Multi-level Protection Scheme is a definite advantage
3. Familiar with the usage of the professional communication instruments and application software, TCP/IP knowledge, the Firewall, IPS, Audit, etc., equipment, IPSec/VPN/LAN/WLAN technology, LTE/5G security technology.
4. Have the rich experience with the network planning, networking design for data communication system.
5. More than 8 years experience working with Information and Cyber Security by Design, demonstrating an expert working knowledge of which security controls can mitigate certain risks
6. Experience working in multiple security domains such as platform hardening, vulnerability management, web application and browser security, penetration testing, applied cryptography, network protocols and secure network design.
7. Good communication and interpersonal skills both internally and externally.
8. Excellent English communication skills in both written and oral
9. BS/MS/PhD in Computer Science, Information Systems, Electrical Engineering, or the equivalent in experience and evidence of exceptional ability.
10. Expert knowledge in industry standards, such as ISO27001, NIST, etc.
11. Cybersecurity certifications are added value for the job (IEC62443, CSSLP, CISSP, CCSP).

上海电气泰雷兹交通自动化系统有限公司（简称“上海电气泰雷兹”）由上海电气集团和泰雷兹集团共同投资组建，是专注于城轨信号系统的中方控股高新技术企业。为地铁、轻轨、市域快轨、单轨等多种制式的城市轨道交通工程，提供信号系统及机电集成解决方案。公司还关注全生命周期服务，在业内率先提供信号系统的代维服务。
来自泰雷兹集团的SelTrac？ CBTC，是全球领先的信号系统，已成功应用在纽约、华盛顿、伦敦、多伦多、迪拜、中国香港、新加坡等城市的2600多公里的线路上。在国内，上海电气泰雷兹将这套系统部署在了北京、上海、广州、深圳、武汉等10多个城市的1100多公里的线路上。30多年来，SelTrac？ CBTC已经创造了多个***。
在引进消化吸收的基础上，结合国内城轨业主的运营需求，上海电气泰雷兹开发了自主化信号系统TSTCBTC？2.0。国内首创的双CBTC系统，充分冗余，为“零中断运营”而设计，持续助力网络化运营下的安全高效运行。
“乐享出行，只因有我”，上海电气泰雷兹始终秉承“安全***，客户至上，以人为本，正直为纲，创新驱动，表现卓越”的理念，为中国城市轨道交通提供最先进可靠的信号系统。