Job description
1. IT compliance management:
- Ensure all IT systems and related processes comply with international security standards (such as ISO 27001, GDPR, SOX) and local legal regulations.
- Manage and monitor IT compliance policies, conduct periodic audits and ensure that related processes, systems and teams comply with security and legal requirements.
2. Development and improvement of management processes:
- Coordinate with relevant departments to develop and improve IT management processes to ensure effectiveness, safety and compliance.
- Conduct risk assessments and propose measures to mitigate security and legal risks in IT processes.
3. Internal controls and risk management:
- Implement and monitor internal control activities related to risk management and compliance, ensuring systems and processes are operated safely and securely.
- Propose and implement risk prevention solutions and security control plans for the company's IT systems and business processes.
4. Audit and compliance reporting:
- Participate in and coordinate internal and external audits related to IT compliance, ensuring all audit requirements are fulfilled and procedures are followed correctly.
- Prepare periodic reports on the company's IT compliance status and propose improvement solutions.
5. Training and compliance awareness:
- Develop and implement training programs and awareness initiatives on compliance and information security for employees.
- Ensure compliance processes are clearly communicated and all employees understand their compliance responsibilities.
Requirements
1. Qualifications
- Bachelor's degree in IT, Information Systems, Risk Management or related fields.
- Security audit certification such as CISA is an advantage.
2. Experience
- At least 3 years of experience in IT compliance management, risk management or IT audit.
- Practical experience in developing, implementing and monitoring IT compliance processes and policies.
- Understanding of international security standards and regulations such as ISO 27001, GDPR, and data protection regulations.
3. Skills
- Good process management and compliance skills, with the ability to assess risks and establish effective control measures.
- Analytical and problem-solving skills, particularly for issues related to compliance and system security.
