工作职责: OMNIVISION is a leading developer of advanced digital imaging solutions. They provide a diverse culture that works together on the development of cutting-edge imaging technology, products and solutions. At OMNIVISION, they know that happy employees are critical to success, so they have created a culture focused on three tenets: Thrive, Engage, Innovate. OMNIVISION’s Information Security organization is looking for a Sr. Information Security Analyst to join its team. Core responsibilities include: Vulnerability Management: - Operates, Administers and Manages the tools related to Vulnerability Management Program. - Operating vulnerability management processes, suggesting applicable change controls, and security exceptions. - Designing and implementing vulnerability reporting and monitoring solutions. - Maintaining and updating process guides and assisting with reporting to leadership and other stakeholders. - Improving business-wide knowledge and understanding of emerging threats. User Awareness: - Using a risk-based approach, establish and drive a culture of security across OMNIVISION that drives secure behaviors throughout the workforce. - Establish a best in-class approach to delivering security concepts and skills to end users through clear, accessible and engaging messaging - Demonstrated capability in implementing and managing phishing training programs - Demonstrated experience in creating, publishing, maintaining, and managing information security awareness training modules and related content. Regulatory Compliance and Advisory: - Stay abreast of the latest cybersecurity regulations and standards in China. - Advise on compliance with Chinese cybersecurity laws and regulations. - Work closely with IT, legal and compliance teams to ensure organizational adherence to regulatory requirements. 任职资格: Minimum Qualifications: - 8 years of experience in the Information Technology or Information Security space - Experience in managing technical solutions like Tenable Nessus, Crowdstrike Exposure Management, Rapid 7 Nexpose, Proofpoint Security Awareness, KnowBe4 - Strong understanding of technical concepts with focus on Cloud, Networks and System Administration - Experience working in distributed and Global workforce - Ability to balance a variety of due dates, and requirements while working on various tasks - Good command of English in Listening, Speaking, Reading, and Writing.
