Information Security Consultant

Objective of job

Ensure that the organization and IT assets follow security standards and governance. Monitor and identify system vulnerabilities, threats, and issues, document findings, track remediation, and develop and implement cloud security strategies.

• Govern compliance with policies and processes protecting the confidentiality, integrity, and availability of IT assets.
• Manage organizational and technical controls, risk assessments, and risk mitigation measures.
• Identify vulnerabilities in services and applications; coordinate penetration testing and assessments, document results, and ensure remediation.
• Assess threats, develop security measures, and evaluate their effectiveness.
• Support information classification, security incident coordination, incident response, and recovery planning.
• Develop and conduct targeted security awareness campaigns and define security controls derived from policies.

Job designation

• Create, update, enforce, and maintain information security policies, standards, and procedures.
• Ensure compliance with laws, regulations, and standards including ISO 27001 and NIST.
• Plan and conduct internal security audits and coordinate external audits and assessments.
• Identify, assess, and manage information security risks and contribute to the security governance framework.
• Prepare compliance reports, track security metrics, and communicate risks to stakeholders.
• Monitor policy enforcement, investigate violations, and take corrective action.
• Assess third-party supplier security practices, contracts, and compliance.
• Collaborate with IT teams, developers, and business stakeholders; provide training and awareness.

Qualifications

• Deep understanding and experience in IT security, risk management, compliance, security standards, operating systems, and data protection.
• Knowledge of cloud security, networks, web technologies, databases, and IT operations, including ITIL.
• Experience with security frameworks such as NIST and ISO 27001.
• Relevant certifications such as CISA or CISSP.
• More than 5 years of experience focused on security governance and security operations.
• Bachelor's degree or higher in Computer Science encompassing Information Security.

Benefits

Benefits include flextime, possible hybrid work, health benefits, mobility offers, employee discounts, possible parking, an in-house doctor, good public transport, a barrier-free workplace, and a canteen or café.

Contact

Mercedes-Benz Group China Ltd., Wang Jing Int. R&D Park Phase III, 6 Wangjing East Road, 100102 Beijing. Recruitment China: recruitment_cn@mercedes-benz.com