Objective of job
IT Security Consultant will be responsible for conducting and enhancing the risk and compliance effort to raise the overall security and compliance posture for Daimler China entities. This position will also be directly responsible for implementing, maintaining and improving policies, procedures and internal controls to assure compliance with applicable regulatory and legal requirements as well as best practices.
Job designation
•Responsible for managing compliance level to the whole Daimler Security Policy and Risk Management Framework in Daimler Greater China and associated Legal Entities.
•Responsible for IT Security process, policy & regulations management
•Responbible for IT Security related law & regulation monitoring and interpretation
•Conduct information security management reviews and information security management system (ISMS) assessments
•Ensure technical implementation and business processes are aligned
•Support in IT security related audits and drive security self-assessments
•Monitor information security and ensure the transparency
•Ensure IS Standards and controls are considered in all application life cycles
•Assist Risk Management, Corporate Security, Corporate Compliance and Corporate Audits in audit/assessment and drive security self-assessments
•Support in China Cyber Security Law related assessments and filling work
•Support in Cloud risk analysis
•Be responsible for analysis of security issues arising and provide solution
•Performance Management
-Responsible for financial management process which include but not limited, planning, reporting, procurement management, contract management, accounting and tax process.
-Responsible for supplier management which include but not limited on board, performance measure/monitor, off board process.
-Responsible for team asset management which include hardware, software, document, digital asset.
•Security Governance
-Lead and collaborate with relevant functions to develop and implement security related topic governance, include but not limited data, application, product, platform governance, based on the laws, regulations, internal policies.