- Define & continuously improve the overall process used to consult, coordinate, track and monitor critical cyber security findings through to remediation
- Define & operate the process used for handling output of critical red team / purple team / pen test activities to ensure tracking, escalation, and remediation of findings
- Design and advance the handling of remediations for critical zeroday and critical vulnerabilities
- Own process development used for critical cyber security findings coming out of incidents
- Establish and enhance process to identify, track and report on cyber security compliance for corporate requirement applicable legal entities not managed by GD
- Create remediation procedures based on lessons learned
- Set strategic direction for critical remediation activities and act as advisor to process managers to enable the development of all remediation processes
- Support operational teams like product teams, BUs & IT representatives to remediate findings by providing guidance on what needs to be done by whom & take over the coordination role
- Work closely with the vulnerability and offensive security teams to consolidate critical remediation recommendations
- Act as consulting body to product, IT & infrastructure teams on mitigation strategies & techniques to integrate security remediation into the system & software development lifecycle
- Act as an interface between the product families, business representatives and security processes & provide consulting services for remediation activities
- You will be responsible for the daytoday execution of our Cyber Security compliance handling of "Self-Managed Environments"
- Part of your activities will be the reporting of Key Indicators to see how entities comply to the security requirements and to see how the process is running.
- You will be responsible for the onboarding of new entities to the SME compliance process and constantly seek to improve and mature the process.
- You will liaise with 3rd party vendors and establish/maintain good working relationships.
- As part of our CISO Organization you will closely work together with the Cyber Security Defense Center, Cyber Security Governance as well as our IT operations unit.
- You have completed a subjectrelated university/technical college degree in (business) informatics or equivalent knowledge and skills acquired through many years of relevant professional experience and further training.
- You have a minimum of 35 years' experience in compliance assessments or other relevant cyber security fields
- You can work independently in a multinational / global team and bring a structured, analytical, qualityfocused approach with you
- You have completed a subjectrelated university/technical college degree in (business) informatics or equivalent knowledge and skills acquired through many years of relevant professional experience and further training.
- Proof of recognized certifications such as CISSP, CISM, CRISC, CISA or others would be a plus.
- You have great communications skills to align and communicate with stakeholders throughout BASF's organization.
- Outstanding language skills in English
- Proof of recognized certifications such as CISSP, CISM, CRISC, CISA or others would be a plus.
-
Novo Nordisk A/S Nanjing, 中国 · 重要职责: · 通过RDPAC考试认证 · 带领团队做好市场拓展,包括开发新的医疗机构,新的科室客户,新的渠道,商业模式的拓展。 · 负责带领所辖区域团队完成所管辖区域的销售目标,做好与销售有关的活动; · 建立一支有凝聚力、有竞争力的"高绩效、高合规"的销售队伍; · 在所辖区域推动跨部门的合作,以加速药物可及性,并且赢得市场竞争; · 塑造肥胖症这个新的疾病领域,并协助客户做好肥胖症诊疗的高质量长期发展规划。 · 持续寻找机会增长点,满足更多尚未被满足的患者治疗需求,并为客户带来最佳解决方案 · 做好区域内费用管控,管理团队合规使用费用,通 ...
-
Novo Nordisk Nanjing, 中国 · 重要职责: · 通过RDPAC考试认证 · 带领团队做好市场拓展,包括开发新的医疗机构,新的科室客户,新的渠道,商业模式的拓展。 · 负责带领所辖区域团队完成所管辖区域的销售目标,做好与销售有关的活动; · 建立一支有凝聚力、有竞争力的"高绩效、高合规"的销售队伍; · 在所辖区域推动跨部门的合作,以加速药物可及性,并且赢得市场竞争; · 塑造肥胖症这个新的疾病领域,并协助客户做好肥胖症诊疗的高质量长期发展规划。 · 持续寻找机会增长点,满足更多尚未被满足的患者治疗需求,并为客户带来最佳解决方案 · 做好区域内费用管控,管理团队合规使用费用,通过 ...
-
Hilton Nanjing, 中国 OTHERFocus on Finance Operations related internal control, including but not limit to Revenue/ Cash/ AR/ Credit management, Procurement/ Receving/ Cost/ Inventory management, Contract/ AP/ Payroll managerment, IT/ System management, etc. · § Every week, prepare trip report to identify ...
-
安全工程师
1周前
BSH Home Appliances Group Nanjing, 中国职位描述 Duties and responsibilities · The safety engineer is responsible for supporting BSH-PRC on laboratory, marketing and sales activities in all aspects of establishing, maintaining, and enhancing occupational health and safety, including human working conditions. This includes ...
-
Thermo Fisher Scientific Jiangsu, 中国 全职Essential Functions · • Manages and motivates project management staff. Recruits, trains, develops, and assesses employees' performance. Writes, evaluates, amends and deploys procedures and SOPs in global alignment. Monitors SOP and key task compliance. · • Serves as chief liais ...
-
Hilton Nanjing, 中国 OTHERAs the FSSC corporate Sr Accountant, you will be responsible for performing the following tasks to the highest standards: · • Transactional Accounting: · Perform the GL accounting activities timely and accurately in accordance with US GAAP & PRC GAAP for FSSC. · Verify and proces ...
-
Bosch Nanjing, 中国 全职Job Description · Responsibilities: · - Leading project team members in a matrix organization · -Tracking and creating project schedules with risk and bottleneck management · -Conducting management reviews and escalation · -Coordination with calculation of product cost, EBIT. Etc ...
-
Swenta Limited Nanjing, 中国Develop processes/ controls for Accounts Payable, Inventory, IRS 16 (Leases), Travel & Expense, Payroll and associated reporting requirements on ORACLE ERP · Manage IFRS16, Lease Operations, Inventory, & Payroll, Manage the daily Non IFRS 16 Operating Leases Operations · Prepare ...
-
Sr ATR Team Lead
3天前
J&J Family of Companies Jiangsu, 中国 Paid WorkSr ATR Team Lead W · Description · The A2R Senior Team Lead is responsible for managing and overseeing end-to-end service delivery in the General Accounting function for specific business sector(s) and countries serviced by GFS-Asia Pacific (China). · Account to Report Process Ma ...
-
The Ritz-Carlton Nanjing, 中国 全职Job Number · Job Category Human Resources · Location The Ritz-Carlton Nanjing, No 18 Zhongshan Road, Nanjing, Jiangsu, China VIEW ON MAP · Schedule Full-Time · Located Remotely? N · Relocation? N · Position Type Management · JOB SUMMARY · The HR Manager directs and works with H ...
-
Honeywell Nanjing Shi, 中国Innovate high-purity, high-performance chemicals and materials · Position Summary: · This position is work with function team to ensure the quality of EV NPI project such as products design quality and NPI process maturity. Need to be in charge of new products quality go through ...
-
Hilton Nanjing, 中国 OTHERAs the Manager, Finance Opening, FSSC, you will be responsible for performing the following tasks to the highest standards: · Financial Accounting & Control · Overall management of the accounting records and financial reports of the hotel ensuring compliance with company, owne ...
-
ehs高级工程师
6天前
BSH Home Appliances Group Nanjing, 中国职位描述 岗位职责 Job Description · 1.Develop EHS standards, regulation compliance evaluation, take EHS projects like safety culture set up · 制定EHS规范,负责安全相关合规评价以及安全改善相关项目 · 2.Chemical management:chemical assessment ,PPE assessment · 化学品管理:化学品评估,PPE评估 · 3.Occupational health management · ...
-
HSE Engineer
3天前
Safran Aircraft Engines Jiangsu, 中国 Fixed Term contract - 全职Job Description · 1. Work closely with operational personnel to implement HSE procedure concerning environmental affairs, employee health, safety and loss prevention to ensure compliance with regulatory and statutory requirements. 与生产等各运行部门紧密合作推行HSE相关的政策,程序,以及确保合规和相关 法律法规的要求。 · ...
-
Finance Manager
6天前
APAC Michael Page Jiangsu, 中国 全职1.Mature foreign company with very stable business development in China. · 2.New set up factory, good internal career development platform. · Client Details · Our client is a mature, stable, and charming American-owned enterprise, has been operating in China for decades. Currentl ...
-
Quality Engineer
5天前
Corning Jiangsu, 中国Requisition Number: 63319 · Corning is vital to progress – in the industries we help shape and in the world we share. · We invent life-changing technologies using materials science. Our scientific and manufacturing expertise, boundless curiosity, and commitment to purposeful inve ...
-
HSBC Nanjing, 中国 Permanent - temps pleinWealth and Personal Banking (WPB) · Wealth and Personal Banking is our new global business combining Retail Banking and Wealth Management; and Global Private Banking, to become one of the world's largest global wealth managers with trillion in assets. Our dedicated colleagues ser ...
-
Thermo Fisher Scientific Jiangsu, 中国 OTHERJob Description · Essential Functions: · Designs, configures and builds moderate to highly complex web and/or phone based clinical trial applications. · Reviews designs for compliance/feasibility within the database system and consistency with any current standards and/or spo ...
-
BASF SE NANJING, 中国位于南京的巴斯夫中国数字化中心吸引、培养和发展充满热情的数字化人才,他们将对巴斯夫的数字化未来产生深远的影响。快来加入我们,成为巴斯夫数字化之旅的一部分。 · Digital Hub China in Nanjing attracts, grows, and develops passionate people who will meaningfully impact the digital future of BASF. Come join us and be a part of our digitalization journey. · Object ...
-
Standard Chartered Bank Nanjing, 中国 全职RESPONSIBILITIES · Strategy · Stick to the updated Mortgage strategy to acquire biz with high productivity and mobility. · Business · Pro-actively promote designated Retail Clients products and services and acquire new customers. Ensure to achieve specific sales targets and s ...
SecAudit, SME Compliance Manager(003913) - NANJING, 中国 - BASF SE
描述
位于南京的巴斯夫中国数字化中心吸引、培养和发展充满热情的数字化人才,他们将对巴斯夫的数字化未来产生深远的影响。快来加入我们,成为巴斯夫数字化之旅的一部分。
Digital Hub China in Nanjing attracts, grows, and develops passionate people who will meaningfully impact the digital future of BASF.
Objectives:
数字化将成为巴斯夫DNA的真正组成部分,创造令人兴奋的全新客户体验和业务增长,并提高流程效率。全球数字服务正在支持巴斯夫业务的数字化转型。我们的使命是推动巴斯夫的数字化转型,通过强大的敏捷文化,提供创新的、全球性的、高质量的数字化产品和服务。南京数字中心是我们为巴斯夫提供区域和全球解决方案的全球重要基地之一。
Main Tasks:
在此职位上,您将专注于以下目标
补救过程和程序设计:
- 定义并持续改进用于咨询、协调、跟踪和监控关键网络安全发现直至补救的整个过程
- 定义和操作用于处理关键红队/紫队/渗透测试活动输出的流程,以确保跟踪、上报和补救结果
- 设计并推进针对关键零日漏洞和关键漏洞的补救措施处理
- 自己的流程开发用于从事件中得出的关键网络安全发现
- 建立并加强流程,以识别,跟踪和报告网络安全合规性,以满足企业要求的适用法人实体,不受GD管理
- 根据经验教训创建补救过程
修复咨询:
- 为关键补救活动设定战略方向,并担任流程经理的顾问,以实现所有补救流程的开发
- 支持产品团队、BU 和 IT 代表等运营团队通过提供有关谁需要做什么的指导来补救调查结果并接管协调角色
- 与漏洞和攻击性安全团队密切合作,整合关键的补救建议
- 作为产品,IT和基础架构团队的咨询机构,提供有关缓解策略和技术的咨询机构,以将安全修复集成到系统和软件开发生命周期中
- 充当产品系列、业务代表和安全流程之间的接口,并为修复活动提供咨询服务
- 您将负责我们对"自我管理环境"的网络安全合规处理的日常执行
- 您的部分活动将是报告关键指标,以了解实体如何遵守安全要求并查看流程的运行情况
- 您将负责将新实体加入中小企业合规流程,并不断寻求改进和完善流程
- 您将与第三方供应商联络,并建立/维持良好的工作关系
- 作为我们CISO组织的一部分,您将与网络安全防御中心,网络安全治理以及我们的IT运营部门密切合作
Digitalization will be a true part of BASF's DNA that creates new exciting customer experiences and business growth as well as drives efficiencies in processes.
Our mission is to drive forward the digital transformation of BASF, providing innovative, global and high-quality digital products and services through a strong agile culture.
The Digital Hub Nanjing is one of our global key locations to deliver regional and global solutions for BASF.Main Tasks:
In this role, you will focus on the following objectives
Remediation process & procedure design:
Remediation consulting:
Main Tasks:
Job Requirement:
- 您已取得与学科相关的学位(商业)信息学或通过多年的相关专业经验和进一步培训获得的同等知识和技能
- 您在合规评估或其他相关网络安全领域至少有 3-5 年的经验
您必备技能/知识:
- 您可以在跨国/全球团队中独立工作,并带来结构化,分析,以质量为中心的方法
- 您已完成与学科相关的大学/技术学院学位(商业)信息学或通过多年的相关专业经验和进一步培训获得的同等知识和技能
- 公认的认证证明,如CISSP,CISM,CRISC,CISA或其他将是一个加分项
- 信息安全管理实践和相关规范和标准的知识
- 您具备出色的沟通技巧,能够与巴斯夫整个组织的利益相关者保持一致并进行沟通
- 出色的英语语言能力
希望您拥有:
- 公认的认证证明,如CISSP,CISM,CRISC,CISA或其他将是一个加分项
Job Requirement:
在巴斯夫,我们为可持续发展的未来,创造化学新作用。我们将经济成功与环境保护相结合。我们肩负社会责任。巴斯夫集团超过110,000名员工为巴斯夫的成功做出了贡献。我们的客户遍布世界上几乎所有行业和几乎每个国家。我们的产品组合分为六个部分:
化学品,材料,工业解决方案,表面活性剂,营养与护理以及农业解决方案。巴斯夫2020 年销售额为 590 亿欧元。更多信息请见 。
Digital Hub China was founded in 2020 in Nanjing.
As part of the Global Digital Hub Verbund, the hub is rapidly growing with a target of a three-digit number of employees in coming years.
Focused on digitalization and innovative IT solutions to enhance BASF's IT portfolio and expertise in China, it brings an all-around capable team of digital talents to create solutions in the context of China's unique digital landscape to BASF.
It also contributes to the smart manufacturing endeavors for the new mega project in Zhanjiang.At BASF, we create chemistry for a sustainable future. We combine economic success with environmental protection and social responsibility.
More than 110,000 employees in the BASF Group contribute to the success of our customers in nearly all sectors and almost every country in the world.
Our portfolio is organized into six segments:
Chemicals, Materials, Industrial Solutions, Surface Technologies, Nutrition & Care and Agricultural Solutions. BASF generated sales of €59 billion in 2020. Further information at
BASF Asia-Pacific Service Center is based in Malaysia, we may reach you via Malaysia phone number.
请时刻警惕任何可能的招聘欺诈行为请注意,巴斯夫绝不会在任何情况下向候选人以任何形式收取任何费用。
