Information Security supervisor(信息安全主管

1. Formulate and update information security system processes, standards and specifications. Cooperate with Production, FM, EHS, PMC and other departments to develop cost-effective implementation plans and ensure their effective execution in the factory. The scope includes but is not limited to personnel management and control, physical isolation, material and waste management, CCTV deployment and administration, configuration, maintenance and operation of security inspection facilities, security inspection procedures and exception handling protocols, information security incident response, reporting and investigation, as well as document recording, filing and preservation.
2. Conduct information security training and promotion for employees, security personnel and internal auditors, cultivate their sound information security awareness, and equip them with essential information security professional skills.
3. Supervise and evaluate the information security performance of all departments and security personnel, and issue weekly performance evaluation reports. Track and oversee the rectification measures and implementation progress of non-compliant information security items, to guarantee effective closure of all non-conformities.
4. Take the lead in responding to customers' information security audits as the primary contact window. Receive and resolve inquiries from all departments, and deliver required reports in compliance with customer requirements to ensure no disruptions to daily business operations
1. 制定、更新信息安全相关体系流程、标准及规范,与生产、FM、EHS、PMC等部门配合,制定经济合理的实施方案并在工厂有效实施。包括但不限于人员管控、物理隔离、物料及废弃物管控、CCTV配置及管理、安检设施的配置、维护及使用,安检流程及异常处理措施,信息安全事件响应、报告及调查、记录填写及保存等。
2. 对员工、安保人员和内部稽核员进行信息安全相关培训及宣导,引导其树立良好的信息安全意识,具备必要的信息安全技能。
3. 对各部门及安保人员的信息安全绩效进行监督、评价,每周发布绩效评价报告。记录、跟踪、监督不符合信息安全要求事项的整改措施和落实情况,确保不符合项得到有效整改。
4. 主导、对应客户信息安全审核,作为主要窗口;接收并处理各部门的咨询,提供符合客户要求的相关报告,确保无影响业务的情形发生。