DPO/CISO Manager

该职位来源于猎聘 Overview This role delivers DPO/CISO-level consulting services to clients, providing integrated "Compliance + Technology + Management" advisory support in the fields of cyber security and data security. It helps clients build security systems, meet compliance requirements, and manage IT security risks—with both professional depth and an executive management perspective. 核心职责与能力要求： 1. 项目经验： o MLPS（分级保护）、ISO 27000 系列、IT 安全审计以及 AI 安全咨询等相关项目经验。 2. 合规知识： o 了解国内外网络安全合规框架 以及相关的法律法规及各项主要标准。 3. 专业技能： o 熟悉基础 IT 安全系统架构（服务器、网络设备、终端等）； o 了解常见网络安全漏洞（如 OWASP Top 10）及其防护逻辑； o 理解云计算（公有云/私有云）安全的核心配置与风险点。 4. 安全体系设计： o 能够独立评估信息/数据安全风险； o 根据客户业务模式及 IT 基础设施，设计、评估并实施信息安全框架、管理体系、技术标准及操作流程。 5. 任职资格要求：

• 工作经验： o 至少拥有 5 年信息安全领域的工作经验。 o 具备高度责任心， 团队合作精神及客户服务意识 o 具备良文档编写，沟通和表达能力，学习能力强
• 教育背景： o 信息安全、计算机科学或相关专业的学士学位； o 持有高级专业认证（如 CISM, CISSP, CIPP 等）者优先。
• 语言能力： o 中英文流利，具备优秀的书面及口头沟通能力。 Requirements
• Project Experience: CBDT, Data classification and categorization, Privacy protection, MLPS, ISO 27000, IT security auditing, and AI security consulting.
• Compliance Knowledge: Master domestic or international cybersecurity compliance frameworks. Familiar with laws, regulations, and all major standards.
• Professional Expertise: Familiar with basic IT infrastructure (servers, network devices, endpoints, etc.), common cybersecurity vulnerabilities (e.g., OWASP Top 10) and protection logic; understand core configurations and risk points of cloud computing (public/private cloud) security.
• Security System Design: Able to independently assess information/data security risks; design, evaluate, and implement information security frameworks, management systems, technical standards, and operational processes by aligning with clients’ business models and IT infrastructure.
• Experience: Minimum of 3 years of experience in data protection and information security.
• Education: Bachelor’s degree in Information Security, Computer Science, or a related field. Advanced certifications (e.g., CISM, CISSP, CIPP) are a plus.
• Language: Fluent in both English and Chinese (Mandarin), with excellent written and verbal communication skills.