Job Description
We are seeking a highly skilled Security Lead to oversee and enhance our organization's security framework. This role involves strategic planning, risk assessment, incident management, and cross-functional collaboration to ensure robust security measures across all business operations.
Key Responsibilities
- Lead the security risk assessment of online business, develop and implement comprehensive security testing strategies.
- Design and lead the emergency response process for security incidents, guide the team to analyze and track incidents, ensure rapid problem localization and efficient resolution.
- Develop a solution strategy for system security issues and ensure the execution and quality of the solution.
- Responsible for comprehensive security construction throughout the data lifecycle, leading security risk assessments and promoting comprehensive governance plans.
- Provide safety training and awareness raising programs to ensure that teams and company employees understand and adhere to safety best practices.
- Work closely with business, product, and technical teams to ensure that security requirements are implemented in all business processes and product development.
- Monitor and evaluate emerging security technologies and trends, and guide the development and updating of the company's security strategy.
Job Requirements
- Proven experience in leading security risk assessments and developing security strategies.
- Strong knowledge of security incident response and problem resolution.
- Ability to design and implement comprehensive security solutions.
- Experience in data lifecycle security and governance.
- Excellent communication skills to conduct safety training and awareness programs.
- Ability to collaborate effectively with cross-functional teams.
- Up-to-date knowledge of emerging security technologies and trends.
Preferred Qualifications
- Certifications such as CISSP, CISM, or equivalent.
- Experience in the online business or e-commerce sector.
- Familiarity with regulatory compliance and industry security standards.