苏州招聘

请点击下方提供的系统职位超链接或通过访问www.pwccn.com下的“人才招聘”网页登录我们的招聘系统, 并通过我们的系统申请该职位。
https://krb-sjobs.brassring.com/TGWebHost/jobdetails.aspx?partnerid=30056&siteid=5939&AReq=1083BR

About Audit and Assurance

Auditing today isn’t only about compliance or merely following rules. By providing a balanced, objective opinion on financial statements, you help to build trust between companies and their stakeholders, including investors. This trust depends on more than just numbers. It requires the application of your judgment and insight, drawing on both technical knowledge and commercial experience.

As our largest service line, you’ll experience a dynamic and fast moving working environment. From potential startups to multinational corporations, clients will look to you for advice on audit, regulatory, listing, private placement, corporate change, and a host of other business topics.

Job Responsibilities:

We are currently looking for individuals with strong information security, technology risk, IT strategy and governance background.

• Key responsibilities include: designing, assessing and implementing technology risk and information security management framework, policies, standards, procedures and solutions such as Enterprise-wide Identity & Access Management (I&AM), Data Loss Prevention (DLP) and Security Information & Event Management (SIEM) solutions, using ISO27001, ISO20000 and CoBIT as the internationally recognised information security and IT service management standards;
• Analysing complex client server systems and multi-platform infrastructure and application systems (including operating system, database, web server, firewall and router, electronic trading / banking systems, etc.);
• Providing assurance over the operations and approach of management service providers in any outsourcing of the IT function;
• Establishing risk governance recommendations on emerging policies to support development of new procedures and methodologies to minimise risks;
• You will be expected to take a consultant's approach to the attest / assurance process of a client's operations utilising our practice methodology to assess our client's operations. You will be responsible for conveying pragmatic solutions to our client's complex business problems through the use of written reports and presentations. The opportunity will be available for you to develop your responsibility in supervising, coaching, developing and leading teams and individual team members.

Requirements

• University degree majoring in information systems, computer science, engineering, accounting, and / or business administration;
• Professional qualifications: CISA, CISM, CISSP, CEH, CISP or other security related qualifications;
• Minimum of 5 years system design / implementation and / or security assessment with a reputable local firm or professional / consulting firm or multi-national corporations; (Candidate with less years of experience will be considered for Senior Associate or Associate positions);
• Practical experience and working knowledge in two or more of the following - business & system processes review, information security management, IT / technology risk management, design and implementation of security solutions such as I&AM, DLP and SIEM, network and system penetration testing, application security testing and code review;
• Familiar with security and control for technologies / enterprise applications: Unix, Windows, Firewall, Routers, SAP, Oracle, Hyperion and/ or evaluating and implementing information security management, IT service management and IT governance framework using ISO27001, ISO20000, ITIL and COBIT respectively;
• Strong fluency in information technology general controls concepts in the areas of systems development, change management, computer operations and access to programs and data; ability to identify and assess business process controls and linkage to IT systems;
• Can ownindependently complete security and risk projects, including IT Risk management (ITRM) , business continuity planning management(BCM), protection of personal privacy and Data Leakage Prevention(DLP), information Security planning, Information security management system（ISMS）and etc.;
• Excellent communication skills in both oral and written English and Chinese;
• Flexible, self-starter possessing intellectual curiosity;
• Ability to interact with executive levels of client and firm management;
• Effective project management, interpersonal and influencing skills are essential; and
• Flexibility to travel to out-of-town engagements.

普华永道–中国、香港、台湾及新加坡
普华永道中国大陆、香港、台湾及新加坡事务所已根据各地适用的法律协作运营。整体而言，员工总数逾14,000人，其中包括约620名合伙人。

无论客户身在何处，普华永道均能提供所需的咨询服务。我们拥有实务经验丰富、高素质的专业团队，聆听各种意见，帮助客户解决业务问题、抓紧机会，发掘每个商机；我们的行业专业化有助于就客户关注的领域共创解决方案。

我们分布于以下城市：北京、香港、上海、新加坡、台北、重庆、中坜、大连、广州、新竹、高雄、澳门、南京、宁波、青岛、深圳、苏州、台中、台南、天津、厦门及西安。
      
中国
www.pwccn.com/chi
(简体中文版)
www.pwccn.com
(英文版) 香港
www.pwchk.com
(英文版) 台湾
www.pwc.com/tw/zh
(繁体中文版)
www.pwc.com/tw/en
(英文版) 新加坡
www.pwc.com/sg
(英文版)
   

普华永道–全球成员机构网络
普华永道致力于提供切合各行业所需要的审计、税务及谘询服务，以提升客户的价值。我们在154个国家和地区超过161,000人的专业团队所组成的全球网络内，分享其思维成果，行业经验和解决方案，并为客户开拓新视野及提供实用的建议。