Crystal International is a global leader in apparel manufacturing with rapid growth. We offer outstanding career opportunities and are now seeking energetic talents who are excited to join us on this journey.
Responsibilities:
- Develop and execute a robust cybersecurity strategy to safeguard the company's information systems, networks, and data.
- Lead the implementation and maintenance of security controls, policies, and procedures to mitigate cyber risks.
- Monitor security incidents and conduct investigations to determine the root cause, impact, and appropriate remediation actions.
- Prepare and present reports on cybersecurity metrics, incidents, and risk assessments to senior management and stakeholders.
- Coordinate with external vendors, consultants, and auditors to ensure compliance with applicable regulations and standards.
- Collaborate with cross-functional teams to ensure cybersecurity considerations are incorporated into the design and implementation of new systems and technologies.
Requirements:
- Bachelor's degree in Computer Science, Information Security, or a related field.
- Proven experience of at least 10 years in cybersecurity roles; with cybersecurity experience in the manufacturing industry is an advantage.
- Relevant certifications such as CISSP, CISM, CISA, CRISA or CEH is/are highly desirable.
- Experience in conducting cybersecurity audits and working with auditors is a plus.
- Strong knowledge of cybersecurity frameworks, standards, and best practices (e.g., ISO 27001, NIST, NIST CSF, PCI-DSS, SOC1,SOC2, SOC3, FISMA, FedRAMP, HIPPA, GDPR, CCPA).
- In-depth understanding of network security, encryption technologies, identity and access management, and security incident response.
- Good command of English and Chinese.
We look forward to receiving your applications.
We offer an attractive remuneration package including competitive salary, fringe benefits and career path to the right candidates. Interested applicants please submit online application by clicking the "Apply " button.
All information provided will be treated as strictly confidential and used solely for recruitment purpose.