IT-Information Security Specialist（Global）-Xi'an
Vertiv · China
职责：
- 负责推动数据安全类项目的实施，DLP数据安全系统策略、流程规范、审计和告警处理
- 负责日常信息安全事件应急响应和支持工作，执行安全基线要求。
- 安全运营及策略优化，输出安全报告，跟进事件闭环并改进流程
- 根据业务需求制定网络安全解决方案，参与公司网络安全、数据安全的建设、等保、护网、演练等
- 完成上级分配的其他工作
要求：
- 全日制本科及以上学历，信息安全类、通信类、信息类、电子类、计算机类相关专业。3年以上信息安全工作经验
- 具备DLP告警分析经验，了解常见DLP策略及规则逻辑
- 有Microsoft Purview DLP / Endpoint DLP 使用或调优经验优先
- 熟悉常见的网络安全设备和技术，例如防火墙、WAF、NAC、入侵检测/防御系统（IDS/IPS）、安全信息与事件管理、DLP、终端安全防护等。
- 熟悉ISO27001、等保及其它国内外相关安全标准与体系，具备审计经验
- 有信息安全运营相关经验，具备一定的安全事件分析和处置能力
- 具备较强的责任感、团队协作精神及良好的英语沟通能力，英语可以作为工作语言
Responsibilities:
- Responsible for promoting the implementation of data security projects, including DLP data security system policies, process standards, auditing, and alert handling
- Responsible for daily emergency response and support for information security incidents, and enforcing security baseline requirements.
- Security operations and policy optimization, output operational reports, follow up on incident closed loops, and improve processes
- Develop cybersecurity solutions based on business needs, participate in the construction of company cybersecurity and data security, protected and protected networks, and conduct drills
- Complete other tasks assigned by superiors
Requirements:
- Full-time bachelor's degree or above, majoring in information security, communications, information, electronics, computer science, or related fields. Over 3 years of experience in information security
- Experience in DLP alert analysis, understanding common DLP strategies and rule logic
- Experience using or tuning Microsoft Purview DLP / Endpoint DLP is preferred
- Familiar with common network security devices and technologies, such as firewalls, WAF, NAC, intrusion detection/prevention systems (IDS/IPS), security information and event management, DLP, endpoint security protection, etc.
- Familiar with ISO27001, classified protection, and other domestic and international safety standards and systems, with audit experience
- Experience in information security operations, with certain security incident analysis and handling capabilities
- Strong sense of responsibility, team spirit, and good English communication skills; English can be used as the working language