資安(產品)架構技術與風險管理專家(台北) at SGS

New Taipei, Xingzhen Village, Taiwan -

Full Time

Start Date

Immediate

Expiry Date

22 Apr, 26

Salary

0.0

Posted On

22 Jan, 26

Experience

2 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Cybersecurity Assessment, Compliance Assessment, Risk Management, Project Management, Client Engagement, Training, Knowledge Sharing, Vulnerability Assessment, Threat Modeling, ICS Technologies, IEC 62443 Standards, Communication Skills, Consulting Skills, Industrial Control Systems, OT Cybersecurity, Regulatory Compliance

Industry

Professional Services

Description

公司簡介我們始終以超越客戶和社會的期望，及提供卓越的市場服務為己任。身為行業的領導者，SGS提供專業的商務解決方案，協助提升產品品質、安全性、生產力及降低風險；在法規日益增多的國際市場上為客戶領航。我們獨立公正的服務為客戶提供特殊的價值，並確保其業務的永續發展。職缺說明 Key Responsibilities • Cybersecurity Assessment – Conduct assessments, gap analysis, and testing for Industrial Control Systems (ICS/OT) based on the IEC 62443 series standards. • Compliance Assessment – Support clients in establishing OT cybersecurity management systems, perform assessments, and verify compliance with international standards and local regulations. • Compliance Solutions – Provide recommendations to strengthen ICS/OT environments, covering areas such as vulnerability remediation, risk management, product security, and supply chain security. • Project Management & Client Engagement – Independently or collaboratively manage projects, including planning, executing assessment, drafting reports, and delivering professional advice to clients. • Training & Knowledge Sharing – Conduct cybersecurity training sessions, workshops, and internal knowledge-sharing to enhance both client and team capabilities. What We Offer Opportunity to work in a global organization with cross-border cybersecurity projects and experts. Exposure to real-world cybersecurity use cases across industries. Career development and growth. 應徵資格 Qualifications Bachelor’s degree or above in Information Security, Electrical/Electronic Engineering, Computer Science, Automation, or related fields. Minimum 3 years of experience in cybersecurity, with at least 1 year in ICS/OT environments (e.g., power, petrochemical, manufacturing, semiconductor, medical automation). Solid understanding of industrial network and OT-specific cybersecurity challenges. Hands-on experience with vulnerability assessment, threat modeling, or risk assessment. Fluent English proficiency (reading, writing, speaking, and listening) is required for working with international standards and engaging in global projects. Preferred / Nice-to-Have Familiarity with the IEC 62443 standards (esp. 2-1, 2-4, 3-3, 4-1, 4-2). Professional certifications such as CISSP, CISA, CEH, GICSP, or ISA/IEC 62443 (CFS/RAS/CDS/CMS). Practical experience with ICS technologies (DCS, SCADA, PLC, HMI). Involvement in compliance projects related to EN 18031, IEC 62443 Cyber Resilience Act (CRA), or other regulations. Strong communication and consulting skills to translate technical findings into business-oriented recommendations

Responsibilities

The role involves conducting cybersecurity assessments and compliance evaluations for Industrial Control Systems. Additionally, it includes project management, client engagement, and training to enhance cybersecurity capabilities.