Awareness, Cyber Security Office(006089)

位于南京的巴斯夫中国数字化中心吸引、培养和发展充满热情的数字化人才，他们将对巴斯夫的数字化未来产生深远的影响。快来加入我们，成为巴斯夫数字化之旅的一部分。

Digital Hub China in Nanjing attracts, grows, and develops passionate people who will meaningfully impact the digital future of BASF. Come join us and be a part of our digitalization journey.

Objectives:
数字化将成为巴斯夫DNA的真正组成部分，创造令人兴奋的全新客户体验和业务增长，并提高流程效率。全球数字服务正在支持巴斯夫业务的数字化转型。我们的使命是推动巴斯夫的数字化转型，通过强大的敏捷文化，提供创新的、全球性的、高质量的数字化产品和服务。南京数字中心是我们为巴斯夫提供区域和全球解决方案的全球重要基地之一。

巴斯夫网络安全办公室（BCSO）是内部业务合作伙伴和员工进入网络安全组织的第一联络点。作为团队的一员，您可以就网络安全内部服务和主题提供支持和建议。此外，您管理请求，从而有助于维护组织的网络安全成熟度。

Digitalization will be a true part of BASF’s DNA that creates new exciting customer experiences and business growth as well as drives efficiencies in processes. Global Digital Services is supporting BASF business in Digitalization transformation. Our mission is to drive forward the digital transformation of BASF, providing innovative, global and high-quality digital products and services through a strong agile culture. The Digital Hub Nanjing is one of our global key locations to deliver regional and global solutions for BASF.

The BASF Cyber Security Office (BCSO) is the first point of contact for internal business partners and employees into the Cyber Security Organization. As a member of the team, you support and advise on Cyber Security internal services and topics. Furthermore, you manage requests and therefore contribute to the maintenance of the cyber security maturity of the organization.

Main Tasks:
BSCO 服务管理
- 管理服务框架和主题职责
- 通过服务衡量和报告

BSCO 服务代理推动持续改进
- 作为内部业务合作伙伴的第一联系人，处理在提供的信息和指导范围内未解决的请求
- 为标准化请求提供基于知识库的第一级咨询
- 根据知识库和主题专家（SME）的意见，为非标准化请求提供二级咨询
- 管理与内部 SME 的请求匹配，包括管理有关服务级别的期望
- 支持内部业务合作伙伴 （IBP） 执行保护需求分析 （PRA） 作为精益信息安全评估 （LISA） 的一部分
- 文档请求处理、匹配和临时状态 ·在完成服务交付后与IBP互动以收集反馈
- 维护服务管理工具
- 维护和进一步发展知识基础

BSCO service management
- Manage service framework and topic responsibilities
- Drive continuous improvement by service measurement and reporting

BSCO service brokering
- Act as a first point of contact for internal business partners with requests that are not solved within the provided information and guidance
- Provide 1st level consulting based on knowledge base for standardized requests
- Provide 2nd level consulting for non-standardized requests based on knowledge base and inputs of subject matter experts (SME)
- Manage match-making of requests with internal SME, incl. management of expectations with regards to service level
- Support Internal Business Partners (IBPs) performing Protection Requirement Analyses (PRA) as part of the Lean Information Security Assessments (LISA)
- Document request handling, match-making and interim statuses
- Interact with IBPs to collect feedback after completed service delivery
- Maintain the service management tool
- Maintain and further develop the knowledge base

Job Requirements:
-取得信息技术，工商管理或类似学位
-网络安全领域的技术理解和初步经验（基础设施，网络，加密，应用程序开发，云服务,...）
-可靠性，灵活性，高动力和服务导向
-能够在有关公司事务的行动中行使独立判断，包括适当地识别，维护和指导机密问题
-能够处理多个优先事项，并快速准确地响应来自多个来源的不断变化的需求
-必须具有文化意识，并能够与各级人员进行有效互动
-在处理日历冲突和即将举行的会议/活动时必须表现出积极主动的方法
- 必须以目标为导向和结果导向的方式处理您的职责范围，并以明显的客户导向、奉献精神和决心为特征
- 自信的中英文沟通，包括口语和书面表达能力
- You have successfully completed your degree in information technology, business administration or a comparable education
- Technical understanding and first experiences in the field of Cyber Security (infrastructure, networks, encryption, application development, cloud services,...).
- Reliability, flexibility, high motivation and service orientation
- Ability to exercise independent judgment in actions regarding company matters including identifying, maintaining, and directing confidential issues appropriately.
- Ability to handle multiple priorities and to respond to constantly changing demands quickly and accurately from many sources.
- Must have cultural awareness and be able to interact effectively with all levels of personnel.
- Must demonstrate a proactive approach when handling calendar conflicts and upcoming meetings/events.
- Must approach your area of responsibility in a goal-oriented and results-oriented manner and are characterized by their pronounced customer orientation, dedication, and determination
- Confident communication in Chinese and English, both spoken and written

Nice to have：
- 在网络安全领域有更深的技术经验
- ISMS和ISO27001领域的知识 : CISSP或CISSM认证
- Deeper technical experiences in the field of Cyber Security
- Knowledge in the area of ISMS and ISO27001 · CISSP or CISSM certification

巴斯夫中国数字化中心于2020年在南京成立。作为全球数字中心的重要部分，中国中心正在迅速发展中，未来将会有更多岗位开放。巴斯夫专注于数字化和创新的IT解决方案，以增强巴斯夫在中国的IT化和专业化，为巴斯夫带来了一支全方位的数字化人才团队，在中国独特的数字化环境中创造解决方案。中心还为湛江一体化基地等大型项目的智能制造做出贡献。


在巴斯夫，我们为可持续发展的未来，创造化学新作用。我们将经济成功与环境保护相结合。我们肩负社会责任。巴斯夫集团超过110，000名员工为巴斯夫的成功做出了贡献。我们的客户遍布世界上几乎所有行业和几乎每个国家。我们的产品组合分为六个部分：化学品，材料，工业解决方案，表面活性剂，营养与护理以及农业解决方案。巴斯夫2020 年销售额为 590 亿欧元。更多信息请见 www.basf.com。

Digital Hub China was founded in 2020 in Nanjing. As part of the Global Digital Hub Verbund, the hub is rapidly growing with a target of a three-digit number of employees in coming years. Focused on digitalization and innovative IT solutions to enhance BASF’s IT portfolio and expertise in China, it brings an all-around capable team of digital talents to create solutions in the context of China’s unique digital landscape to BASF. It also contributes to the smart manufacturing endeavors for the new mega project in Zhanjiang.


At BASF, we create chemistry for a sustainable future. We combine economic success with environmental protection and social responsibility. More than 110,000 employees in the BASF Group contribute to the success of our customers in nearly all sectors and almost every country in the world. Our portfolio is organized into six segments: Chemicals, Materials, Industrial Solutions, Surface Technologies, Nutrition & Care and Agricultural Solutions. BASF generated sales of €59 billion in 2020. Further information at www.basf.com.

BASF Asia-Pacific Service Center is based in Malaysia, we may reach you via Malaysia phone number.

请时刻警惕任何可能的招聘欺诈行为！请注意，巴斯夫绝不会在任何情况下向候选人以任何形式收取任何费用。