IT-Information Security Specialist（Global）-Xi'an

职责：

负责推动数据安全类项目的实施，DLP数据安全系统策略、流程规范、审计和告警处理

负责日常信息安全事件应急响应和支持工作，执行安全基线要求。

安全运营及策略优化，输出安全报告，跟进事件闭环并改进流程

根据业务需求制定网络安全解决方案，参与公司网络安全、数据安全的建设、等保、护网、演练等

完成上级分配的其他工作

要求：

全日制本科及以上学历，信息安全类、通信类、信息类、电子类、计算机类相关专业。3年以上信息安全工作经验

具备DLP告警分析经验，了解常见DLP策略及规则逻辑

有Microsoft Purview DLP / Endpoint DLP 使用或调优经验优先

熟悉常见的网络安全设备和技术，例如防火墙、WAF、NAC、入侵检测/防御系统（IDS/IPS）、安全信息与事件管理、DLP、终端安全防护等。

熟悉ISO27001、等保及其它国内外相关安全标准与体系，具备审计经验

有信息安全运营相关经验，具备一定的安全事件分析和处置能力

具备较强的责任感、团队协作精神及良好的英语沟通能力，英语可以作为工作语言

Responsibilities

• Responsible for promoting the implementation of data security projects, including DLP data security system policies, process standards, auditing, and alert handling

• Responsible for daily emergency response and support for information security incidents, and enforcing security baseline requirements.

• Security operations and policy optimization, output operational reports, follow up on incident closed loops, and improve processes

• Develop cybersecurity solutions based on business needs, participate in the construction of company cybersecurity and data security, protected and protected networks, and conduct drills

• Complete other tasks assigned by superiors

Requirements

• Full-time bachelor's degree or above, majoring in information security, communications, information, electronics, computer science, or related fields. Over 3 years of experience in information security

• Experience in DLP alert analysis, understanding common DLP strategies and rule logic

• Experience using or tuning Microsoft Purview DLP / Endpoint DLP is preferred

• Familiar with common network security devices and technologies, such as firewalls, WAF, NAC, intrusion detection/prevention systems (IDS/IPS), security information and event management, DLP, endpoint security protection, etc.

• Familiar with ISO27001, classified protection, and other domestic and international safety standards and systems, with audit experience

• Experience in information security operations, with certain security incident analysis and handling capabilities

• Strong sense of responsibility, team spirit, and good English communication skills; English can be used as the working language