Asset Management – Cybersecurity Implementation Lead – VP at JPMC Candidate Experience page

Shanghai, Shanghai, China -

Full Time

Start Date

Immediate

Expiry Date

21 Jan, 26

Salary

0.0

Posted On

23 Oct, 25

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Information Security, Cybersecurity, Risk Assessment, Incident Response, Network Security, Security Audits, Team Management, Vulnerability Scanning, Penetration Testing, Security Monitoring, Linux Security, Windows Security, Scripting, Communication, Project Management, Leadership

Industry

Financial Services

Description

We are seeking an expert to lead the Information Security Implementation team, build, implement and oversee an information security system that is aligned with the company's strategic goals, ensure the company complies with laws, regulations and regulatory requirements, as well as the group's internal control requirements, and effectively manage information security risks. Job Responsibilities： 1. Security system and strategy mechanism construction: Responsible for formulating, reviewing and continuously optimizing the company's information security strategies, systems, standards and processes in accordance with laws, regulations and regulatory requirements, as well as the group's internal control requirements. Responsible for the overall planning, construction and operation of the company's information security system. Responsible for security risk assessment, regular vulnerability scanning, penetration testing and security audits, and promoting closed-loop rectification. Optimize the work framework of the cybersecurity team, formulate and implement plans in a planned and gradual manner, and promote and enhance cybersecurity service capabilities 2. Security operations and incident response: Lead the network security operations team to be responsible for 7x24 hours security monitoring, real-time analysis of security alerts, and rapid response, disposal and tracing of security incidents. Manage and operate various security devices and systems, including but not limited to firewalls and other network security protection devices and systems; Establish and improve emergency response plans for security incidents and organize drills regularly. 3. Safety technology guarantee Responsible for the security protection of the company's network, servers, user terminals, applications and data. Lead the completion of internal and external audit work. Collaborate closely with application development, operation and maintenance, service and other teams to promote the implementation of software code security system. 4. Team Management Responsible for the daily management, work arrangements, skills training and echelon building of the information security team. Required qualifications, capabilities, and skills: Proficient in English Bachelor degree or above in computer science, information security or other related majors. More than 5 years of working experience in information security, including at least 2 years as a team leader or core member. Candidates with information security experience in the securities and fund industry preferred. Candidates with information security experience in other financial institutions, large technology or internet industries may also be considered. Technical capabilities: Proficient in network attack and defense technologies, familiar with the principles and prevention measures of common web security vulnerabilities such as OWASP Top 10. Have extensive experience in security equipment operation and maintenance, and a deep understanding of the principles of security protection equipment such as firewalls. Proficient in Linux/Windows operating system security configuration and hardening. Have scripting skills (such as Python/Shell/PowerShell) to automate security tasks. Excellent communication and coordination skills, project promotion ability, multi-tasking ability and team leadership ability. Have a strong sense of responsibility and ability to withstand pressure. Candidates holding certifications such as CISSP, CISP, CISA, etc. are preferred.

Responsibilities

Lead the Information Security Implementation team to build and oversee an information security system aligned with the company's strategic goals. Ensure compliance with laws and regulations while managing information security risks effectively.