天津招聘

What you will do

This is an ideal time for those skilled in IT risk management and compliance at JCI. Building on the momentum of its investment in its cybersecurity capability, JCI seeks to expand the scope of its IT risk management and compliance capabilities.

In this role, you will act as a subject matter expert for compliance requirements and the deployment of enterprise and local controls and the evaluation of compensating controls. This position requires strong communication abilities, as it engages with cross-functional business partners, team members, and leadership across the organization and stakeholders including local authorities related to topics of regulatory compliance.

How you will do it

• Administer the compliance program within Global Information Security function with particular focus on CSL and support objectives of the PCI Compliance Program


• Lead engagements with 3rd parties for the purposes of identifying and compliance issues, addressing remediation activities, and supporting certification activities


• Represent JCI to external stakeholders with respect to compliance related activities


• Facilitate and execute enterprise scoping, control assessments, evidence collection, issue remediation, and reporting activities


• Communicate program compliance issues and control gaps through governance and audit control processes


• Provide consultative support to cross-functional business partners on the methods, practices and solutions that achieve the requirements defined by applicable compliance frameworks


• Conduct and document evaluations of compensating controls


• Administer the JCI common controls framework to ensure relevant internal and external information security requirements are mapped and communicated to the enterprise


• Maintain compliance related policy, standard and procedure documentation to drive consistent, reliable, and repeatable compliance activities


• Coordinate relevant, policy, standard, and procedural changes with key IT and business partners


• Support the development and implementation of PCI security awareness, training, and continuous improvement efforts

What we look for

Required

• 5+ years’ of progressive IT Audit and/or Information Security work experience within a relevant security compliance role and setting, with broad exposure to multiple competing regulatory and industry-based requirements and environments.


• Bachelor’s degree (IT/IS or business preferred)


• Experience in operationalizing IT compliance activities and programs, and proven presentation and facilitation skills


• Experience preparing and presenting Attestations of Compliance and providing guidance in implementing controls based on regulatory requirements


• Experience working with CSL, MLPS certification, ISO 27001, NIST 800-53 security frameworks and PCI DSS Standard in complex IT operating environments is required.


• Exceptional teaming skills incorporating cross-functional teams, peer relationships, informing, and understanding and appreciating differences.


• Strong project management, prioritization, presentation, and facilitation skills, demonstrated ability to effectively manage multiple tasks and priorities and drive change across a complex organization, through multiple stakeholders


• Strong consultative skills, with the ability to advise and consult with business and technical professionals.


• Some international travel may be required.

Preferred

• CISA (Certified Information Security Auditor), CISM (Certified Information Security Manager), CISSP (Certified Information System Security Professional) or similar industry certification is preferred

关于江森自控
在江森自控，我们致力于改善人们的生活、工作、学习和娱乐环境。江森自控致力于可持续发展，公司承诺在2040年前实现净零碳排放。作为智慧、健康和可持续建筑的全球领导者，我们凭借超过135年的创新经验，运用全面的数字化解决方案OpenBlue及建筑科技领域完整的产品和解决方案组合，为医疗、教育、数据中心、机场、体育场和生产制造等众多领域实现可持续发展的蓝图。江森自控在全球150多个国家拥有100,000名专业员工，旗下拥有多个业内值得信赖的品牌。
亚太区概况
通过广泛的业务网络和足迹，江森自控致力于为该地区的客户提供全方位的卓越服务:
29家制造工厂
10处研发基地
260多个分支机构
28000多名员工
*以上数据包含江森自控和江森自控日立空调
公司在中国拥有：
9000多名员工
9家制造工厂
3处研发基地
40多个办事处
100多个销售支持点
我们的价值观
诚信为先
我们承诺诚实和透明。我们坚持***诚信标准并信守我们做出的承诺。
客户至上
客户成功，我们才能成功。长期战略合作关系带来的独特洞见和实力，让我们能够创造卓越的客户体验与解决方案。
使命为本
我们坚信利成于益，勇于承担：通过我们提供的解决方案、我们对社会的奉献、我们开展业务的方式以及我们对保护人民和环境的承诺让世界变得更加美好。
着眼未来
我们的创新和持续改进文化激励我们在解决当今挑战的同时，不断思考“接下来会发生什么”。
同一个团队
我们是同一个团队，致力于团结协作，创造高效适用的解决方案，推动世界进步。