Summary:
Align Technology is the industry leader and innovator in medical devices which focuses on revolutionizing the dental and orthodontic industry. Align Technology is looking for a Sr. Manager, Information Security - APAC based in our Chengdu office. This exciting role would be part of a culture that is helping to improve lives every day through digital dentistry.
The Sr. Manager, Security Manager will be acting as a regional CISO and will work with global CSO to develop and implement information security programs which are specific to APAC diversified region. You should have exceptional knowledge and skills with information security spectrum pertained to APAC region. This role will be part of Align Technology goal to deliver our clear aligners (Invisalign?) and 3D scanners (iTero?) to our customers. We would love you to join a fun and cutting-edge technology company that has helped create over 5 Million Smiles.
ESSENTIAL DUTIES AND RESPONSIBILITIES
?Act as CISO for APAC region. The buck stops on your desk when comes to anything related to information security in APAC!
?Lead and create a culture of measuring success by business outcome (not by task completion!)
?Develop team members and position them to succeed.
?Provide supervision for direct reports including hired services contractors.
?Establish individual performance goals, review performance against goals and provide mentorship & coaching for employee development.
?Manage resource scheduling and task execution to plans and ives.
?Identify GAPS in current processes and work on improvements
?Create quality metrics for support organizations
?Develop and implement information security policies, training, and technologies to enhance the corporate and operational IT infrastructure.
?Apply knowledge of monitoring, analysing, detecting, and responding to any security events and incidents for information systems and networks.
?Advise and design integrated, dynamic security defences and leverage security solutions to deliver security operational services, including software development, threat hunting, intrusion detection and prevention, situational awareness of network intrusions, security events and data spillage, and incident response s.
?Test, implement, deploy, and operate the infrastructure hardware and software which are required to manage the organization’s security operational services effectively.
Additional responsibilities:
Other duties may be assigned
QUALIFICATIONS
?You are a person who lives and breathes with information security who can create magic when comes to information security space
?A can do attitude, high energy, and creativity are required along with organizational skills and ability to handle multiple tasks.
?Strong interpersonal, oral, written, and visual communication skills, with ability to present findings concisely and effectively.
?Ability to collaborate effectively with management, developers, program management, engineers, administrators, compliance and legal about ives, requirements and designs.
?Ability to pay careful attention to detail, as well as ability to design solutions for multiple product requirements.
?Experience with SOC and NOC operations, kill chain analysis for incident response, and relevant security technologies, including SIEM, IDS and IPS, EDR, and HBSS
?Experience with analysing and synthesizing cyber and log information with other relevant data sources, providing guidance and mentorship to others in cyber threat analysis and operations, uating, interpreting, and integrating other sources of information, and fusing computer network attack analyses with other threat intelligence data sources
?Experience with analysing network traffic, large sets of log data, and other relevant security data for breach analysis
?Experience using the NIST CSF and similar works for cybersecurity uations
?Experience with cybersecurity, information security management, and IT controls, including ISO 27000 series or CoBIT
?Knowledge of at least two of the following: network traffic analysis, cyber threat, cyber adversary techniques, log aggregation and correlation, or ing techniques
EDUCATION and/or EXPERIENCE
?BS/MS degree or equivalent in information security or security related fields
?10+ years of experience with information security
?5+ years of experience with incident detection and response, malware analysis, or information forensics
?2+ years of experience with serving as the CISO for a medium to large business
?Demonstrated teamwork skills with a solid analytical and statistical .
?Excellent organizational, communication, presentation, and facilitation skills.
WORK SCHEDULE / HOURS
Get the job done! You are in IT!
