信息安全分析师（应用安全与AI安全）
Information Security Analyst (App Security & AI Security)
公司简介
超过100年来，BlueScope一直致力于打造优质品牌和产品、领先技术以及以客户为中心的精神。通过我们的全球品牌，我们是世界上最大的建筑解决方案制造商之一。我们多元、充满活力且富有灵感的员工队伍致力于通过突破性思维和创新来改善所服务的社区。你的目标、想法和视角可以帮助塑造我们的未来——我们期待听到你的声音！
信息系统部门提供工具和自动化方案，用于存储、组织和操作数据，并使这些数据易于检索。各种硬件和软件工具以及支持，结合在一起以一种成本效益高的方式实现这些功能，从而提高效率和准确性。
IT安全经理通过了解信息安全风险，制定并执行政策和流程来缓解这些风险，确保公司的数据和系统足够安全。
- 提供IS安全职能，包括审查、规划和实施，以及对组织的安全控制进行管理
- 制定并维护企业的业务连续性计划和灾难恢复计划
- 通过政策、架构和培训流程建立安全立场
- 监督企业安全解决方案的运行
- 与开发和网络部门的同行以及业务单元的领导者进行交流，与这些人分享公司的安全愿景，并征求他们通过信息共享和合作来实现更高水平的企业安全的参与
- 领导选择适当的安全解决方案，并监督任何漏洞审计和评估
- 管理安全豁免流程，特别是在涉及公司系统和数据共享风险的情况下
关键指标
- 建立安全风险登记册并进行维护，制定应对关键风险的计划
- 制定并维护为期滚动12个月的安全工作计划
- 制定并维护公司的安全意识培训计划
- 制定并维护公司的安全文档（政策、标准、基线、指南和程序）
- 制定并维护公司的业务连续性计划和灾难恢复计划
- 每六个月开展并协调程序和系统的测试
查看英文原文
Company Description
For over 100 years, BlueScope continues to build on our reputation of quality brands and products, leading technology and a customer-first spirit. Through our global brands, we are one of the largest manufacturers of building solutions in the world. Our diverse, bright and inspired workforce is committed to bettering the communities we serve through breakthrough thinking and innovations. Your goals, ideas and perspective can help shape our future – we look forward to hearing them!
The Information Systems department provides tools and automation to store, organize and manipulate data while making that data easily retrievable. Various hardware and software tools, along with support, combine to enable these functions in a cost effective method that helps to increase efficiency and accuracy.
The IT Security Manager ensures the company’s data and systems are sufficiently secure by understanding information security risks while developing and enforcing policies and procedures to mitigate them.
- Provides the IS security function, including reviewing, planning and implementation, and management of security controls for the organization
- Creates and maintains the enterprise’s Business Continuity Plan and Disaster Recovery Plan
- Establishes a security stance through policy, architecture and training processes
- Oversees the operations of the enterprise’s security solutions
- Interfaces with peers in the development and network departments as well as with the leaders of the business units to both share the corporate security vision with those individuals and to solicit their involvement in achieving higher levels of enterprise security through information sharing and co-operation
- Leads the selection of appropriate security solutions, and oversees any vulnerability audits and assessments
- Manages security exemption processes, particularly where it involves shared risks to the company’s systems and data
Key Measures
- Establishment of a security risk register and maintain, with a plan to address key risks
- Produce and maintain a security program of work for a rolling 12-month period
- Create, and maintain the company’s security awareness training program.
- Create and maintain the company’s security documents (policies, standards, baselines, guidelines and procedures)
- Create and maintain the company’s Business Continuity Plan and Disaster Recovery Plan
- Conduct and coordinate testing of procedures and systems every six months
Education & Experience
Minimum:
- Bachelor’s degree or 4 years of additional relevant experience in lieu of degree
- 5 years of experience in information security management or related functions
Preferred:
- Bachelor’s degree in the field of business administration, computer science, finance, or information systems
- 7+ years of experience in information security management or related functions
- Information Security Management qualifications such as CISSP, CRISC or CISM
Additional Information
The preceding job responsibilities and tasks were designed to indicate the general nature and level of work performed by associates in this job. It is not designed to contain or be interpreted as a comprehensive inventory of all job duties and responsibilities required of associates assigned to this job. Associates may be required to perform other duties as assigned. Additional job competencies, individual goals, and performance measurements are set at the department level.
The benefits are just as rewarding as the work at BlueScope. To support our goal, we offer a total compensation plan and an outstanding benefits package that includes health insurance, life insurance, short and long term disability, paid time off, and retirement.
EEO: Employer/M/F/Disabled/Protected Veteran
BlueScope is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, sex, sexual orientation, gender identity, age, status, as a protected veteran, among other things, or status as a qualified individual with disability.
Originally posted on Himalayas