IT-Information Security Specialist（Global）-Xi'an

职责：

• 负责推动数据安全类项目的实施，DLP数据安全系统策略、流程规范、审计和告警处理
• 负责日常信息安全事件应急响应和支持工作，执行安全基线要求。
• 安全运营及策略优化，输出安全报告，跟进事件闭环并改进流程
• 根据业务需求制定网络安全解决方案，参与公司网络安全、数据安全的建设、等保、护网、演练等
• 完成上级分配的其他工作

要求：

• 全日制本科及以上学历，信息安全类、通信类、信息类、电子类、计算机类相关专业。3年以上信息安全工作经验
• 具备DLP告警分析经验，了解常见DLP策略及规则逻辑
• 有Microsoft Purview DLP / Endpoint DLP 使用或调优经验优先
• 熟悉常见的网络安全设备和技术，例如防火墙、WAF、NAC、入侵检测/防御系统（IDS/IPS）、安全信息与事件管理、DLP、终端安全防护等。
• 熟悉ISO27001、等保及其它国内外相关安全标准与体系，具备审计经验
• 有信息安全运营相关经验，具备一定的安全事件分析和处置能力
• 具备较强的责任感、团队协作精神及良好的英语沟通能力，英语可以作为工作语言

Responsibilities:

• Responsible for promoting the implementation of data security projects, including DLP data security system policies, process standards, auditing, and alert handling
• Responsible for daily emergency response and support for information security incidents, and enforcing security baseline requirements.
• Security operations and policy optimization, output operational reports, follow up on incident closed loops, and improve processes
• Develop cybersecurity solutions based on business needs, participate in the construction of company cybersecurity and data security, protected and protected networks, and conduct drills
• Complete other tasks assigned by superiors

Requirements:

• Full-time bachelor's degree or above, majoring in information security, communications, information, electronics, computer science, or related fields. Over 3 years of experience in information security
• Experience in DLP alert analysis, understanding common DLP strategies and rule logic
• Experience using or tuning Microsoft Purview DLP / Endpoint DLP is preferred
• Familiar with common network security devices and technologies, such as firewalls, WAF, NAC, intrusion detection/prevention systems (IDS/IPS), security information and event management, DLP, endpoint security protection, etc.
• Familiar with ISO27001, classified protection, and other domestic and international safety standards and systems, with audit experience
• Experience in information security operations, with certain security incident analysis and handling capabilities
• Strong sense of responsibility, team spirit, and good English communication skills; English can be used as the working language