Associate/Senior Associate(数据安全合规咨询顾问)-Cyber Security-Risk Assurance-Beijing 1

Job Req ID:  36502
Date:  25 Apr 2024
Country/Region:  CN
City:  Beijing

Job Profile Summary

A career within Risk Assurance Compliance and Analytics services, will provide you with the opportunity to assist clients in developing analytics and technology solutions that help them detect, monitor, and predict risk. Using advanced technology, we’re able to focus on establishing the right controls, processes and structures for our clients to ensure that decisions are based on accurate information and assure that information provided to third parties is accurate, complete, and can be trusted.

Job Description

To really stand out and make us fit for the future in a constantly changing world, each and every one of us at PwC needs to be a purpose-led and values-driven leader at every level. To help us achieve this we have the PwC Professional; our global leadership development framework. It gives us a single set of expectations across our lines, geographies and career paths, and provides transparency on the skills we need as individuals to be successful and progress in our careers, now and in the future.

As a Senior Associate, you'll work as part of a team of problem solvers, helping to solve complex business issues from strategy to execution. PwC Professional skills and responsibilities for this management level include but are not limited to:

Use feedback and reflection to develop self awareness, personal strengths and address development areas.
Delegate to others to provide stretch opportunities, coaching them to deliver results.
Demonstrate critical thinking and the ability to bring order to unstructured problems.
Use a broad range of tools and techniques to extract insights from current industry or sector trends.
Review your work and that of others for quality, accuracy and relevance.
Know how and when to use tools available for a given situation and can explain the reasons for this choice.
Seek and embrace opportunities which give exposure to different situations, environments and perspectives.
Use straightforward communication, in a structured way, when influencing and connecting with others.
Able to read situations and modify behavior to build quality relationships.
Uphold the firm's code of ethics and business conduct.

工作职责
1、负责跟踪国内外数据合规相关监管要求,并解读为企业合规操作指南;
2、负责收集、梳理客户的数据安全合规需求,结合行业实践提供数据安全咨询服务,包括但不限于数据安全分级分类、数据资产风险评估、数据安全合规评测、数据安全管理体系等;
3、负责数据安全咨询服务项目的交付工作,包括但不限于对客户业务合规现状进行调研,识别合规差距及风险,设计数据合规管理体系流程文件、撰写数据安全评估报告、实施数据安全培训工作等。

任职要求
1、熟悉国内外信息安全、数据安全、隐私等相关法规、标准及实践,熟悉不同业务场景中的网络安全合规需求;
2、信息安全、计算机、软件工程、信息化管理或相关专业本科及以上学历者优先;
3、两年以上数据安全合规经验,汽车行业、互联网行业背景优先;
4、具备主动思考能力,有较强的学习能力,逻辑思维能力强; 具备较强的沟通表达能力、良好的团队合作能力; 具备CISSP、CISP 、CISA、ISO等证书优先;

 

The PwC China (including Mainland China, Hong Kong, Macau) does not accept unsolicited resumes from search firm recruiters. Fees will not be paid in the event a candidate submitted by a recruiter without an agreement in place is hired; such resumes will be deemed the sole property of PwC China (including Mainland China, Hong Kong, Macau). PwC China (including Mainland China, Hong Kong, Macau) is an equal opportunity employer. All aspects of employment will be based on merit, competence, performance, and business needs. We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, veteran status, or any other status protected under the local law.

主要职责:

 

•    专注于科技风险咨询与审计服务,帮助客户应对与时俱进的IT及新兴技术风险,包括云计算、物联网、人工智能、数字化转型、大数据分析等; 
•    负责或参与信息技术风险管理、数据分析、内部控制、内部审计相关的科技风险管理咨询项目; 
•    负责或参与IT审计工作,包括信息系统测试、数据分析和应用控制测试等; 
•    参与IT系统控制缺陷分析,风险评估,向上级报告客户的IT信息管理审计发现,并协调和跟进问题的整改情况
•    内部控制、信息安全、流程完整性、信息保密、隐私保护等相关的SOC报告服务; 
•    为客户提供信息系统相关的咨询服务;
•    完成流程访谈、业务和系统梳理、问题分析和挖掘、解决方案设计与落地、报告编制等工作。
•    协助或主导与企业中流程或控制所有者、相关方和管理层进行项目进程及结果的沟通或汇报。

 

任职要求

 

•    2年以上信息系统审计相关工作经验,本科及以上学历;
•    拥有信息技术、审计、数据分析、数学、统计学、信息管理等相关专业的本科或以上学位 ;
•    对信息科技风险咨询工作有深入了解,具备信息科技、企业信息系统、数据安全、隐私保护、风险管理、数据分析与应用、企业业务流程及财务会计等方面的知识储备;
•    有较强的业务意识,能够与管理层有效互动 -具备数据敏感性和探知欲、分析和解决问题的能力,具备较强的逻辑思维、数据分析、沟通汇报、团队协作、项目管理等综合能力;
•    熟悉IT审计相关政策法规和审计方法,具备较好的非现场数据分析及审计模型建设能力;
•    拥有数据安全鉴证项目经验,如SOC报告、ISAE3000报告项目经验的优先;拥有ERP(如SAP、Oracle、用友、金蝶等)系统和/或基于云的应用程序(IaaS、PaaS、SaaS)操作实践或相关背景知识的优先; 
•    熟悉COSO、COBIT相关知识,ITGC和ITAC审计程序,具备CISA、CISSP、CPA认证资格优先;
•    拥有一定的SQL、Python及其他数据分析处理语言及软件使用经验的优先;
•    良好的中英文口语和书面语能力 
•    具有较强的适应能力和抗压能力,适应出差;
•    具有项目管理能力,能独立带领团队完成项目的全过程.