资深安全合规专家

Tasks

• Analyze regulatory policies and laws
• Build compliance self audit system
• Conduct incident response and emergency handling
• Coordinate data security and network security governance
• Design data security architecture solutions
• Design secure SDLC practices
• Drive risk remediation closure loop
• Interpret and transform security regulations and standards
• Lead information security management system
• Optimize security policies and processes
• Perform threat modeling using STRIDE
• Plan SDL lifecycle security
• Plan and implement security compliance reviews and certifications
• Provide security compliance consulting and solutions
• Translate laws into internal standards

Perks/Benefits

• N/A

Skills/Tech-stack

Data Security | Differential Privacy | Digital Certificates | Encryption | GDPR | ISO 27001 | Incident Response | Information Security Management | Information security | Information security management systems | Management systems | NSIT | Network Security | Risk Management | SDL | STRIDE | Secure SDLC | Security Management Systems | Threat modeling