Consultant,Tech&DataAnalytics岗位职责要求

篇2：MgrSnrConsult,ComplianceManagement岗位职责要求

职位描述：

Responsibilities

-ProvidingfinancialindustryclientswithtotalsolutionsandITconsultingservicesrelatedtocompliancemanagementandRelatedTransactionmanagement,includingComplianceManagement/RelatedTransactionManagementSystemPlanningandrelatedinformationsystemdesign

-Assessfinancialindustrycompliancerisks.Assistcustomersinoptimizingcompliancemanagement/RelatedTransactionmanagementaccordingtointernalandexternalregulations

-Assistcustomersintheevaluationandoptimizationofcompliancemanagementsystemsbasedoncustomerneeds

Qualifications

-BachelororabovedegreeinLaw,Finance,ComputerScience,InformationManagementandStatisticsispreferred

-Minimum3-6yearsofexperienceincomplianceandrelatedmanagementsysteminthefinancialindustry

-QualificationssuchasCPA,ACCA,CIA,CICS,andqualificationsintheLegalareasareaplus

-Familiarwiththeregulatoryenvironmentinthefinancialindustry

-Experienceinrelatedpartytransactionmanagementrelatedinformationsystemispreferred

-Stronglearningability,logicalthinking,andexcellentverbal/writtencommunicationskills

职位描述

-为金融行业客户提供合规管理及关联交易管理相关的整体解决方案和IT咨询服务，服务领域包括合规管理/关联交易管理体系规划及相关信息系统设计

-评估金融行业合规风险。根据内外部监管规定，协助客户优化合规管理/关联交易管理

-基于客户需求，协助客户开展合规管理系统评估和优化等

职位要求

-本科及以上学历，法律、财务、金融、信息系统、信息管理、统计学等相关专业优先

-3-6年及以上金融行业合规管理/关联关系管理工作经验

-具有CPA，ACCA，CIA，CICS，法律专业资格证书等相关资质优先考虑

-熟悉国内外金融行业监管规则

-熟悉国内外关联交易监管规则并具备系统化建设经验优先考虑

-学习能力强，逻辑思维能力强，良好的口头/书面沟通能力

篇3：SeniorConsultantManager,CyberSecurity&ITRisk岗位职责要求

职位描述：

Responsibilities

-Provideindustry-specificinformationsecurityresolutionsandrelatedadvisoryservicesandofferadvisoryservicesrelatedtoITriskmanagement

-Provideoverallsolutionsrelatedtoinformationsecurity,includingbutnotlimitedtoinformationsecuritymanagementandtechnologyarchitectureplanning,establishmentofinformationsecuritymanagementsystems,informationsecuritymanagementandtechnologyassessment,andinformationsecuritymetrics.Basedontheinternalandexternalchallengesfacedbycustomers,conductriskassessments,analyseanddesigninformationsecuritydevelopmentplansandimplementationpaths,andassistcustomerswithimplementationandresultsassessment

-ProvideadvisoryservicesrelatedtoITriskmanagement;basedoncustomers'demands,conductsystemassessmentandoptimisation,establishITriskmanagementsystems,assessITriskmanagement,provideITaudit,complianceassessment,involvingITgovernance,ITriskmanagement,systemdevelopmentandmaintenance,informationsecurity,datasecurityandbusinesscontinuity

-ProvidecustomerswithbespoketechnicaladvisoryservicesrelatedtoinformationsecurityandITrisk

-Projectmanagement:manageprojectsrelatedtoinformationsecurityandITriskmanagement

Qualifications

-Bachelordegreeandabove,majorininformationsystem,computerscience,informationmanagementandstatisticswillbepreferred

-Atleast3-5yearsofexperienceininformationsecurityandITriskmanagement;experienceinthefinancialindustryisanadvantage

-AccreditationssuchasCISSP,CISA,CISM,ITIL,ISO27001LAareaplus

-Familiarwithsecurityconfigurationsuchasoperatingsystems,databasesandmiddleware,withprofessionalskillsinsystemsecuritydevelopment,vulnerabilityscanningandpenetrationtesting

-Adeepunderstandingofrelevantlawsandregulations,regulatoryprovisions,internationalstandardsrelatedtoinformationsecurity,includingtheInternetSecurityLaw,ISO27000aswellasregulatoryregimesimplementedbytheCBRCandtheCIRC

-Stronglearningability,goodlogicalthinking,andexcellentverbal/writtencommunicationskills

-Passionate,ambitious,abletoworkunderpressure,andwithastrongsenseofresponsibilityandinnovativespirit

职位描述

-负责提供行业相关的信息安全整体解决方案和咨询服务，以及提供IT风险管理相关咨询服务

-负责提供围绕信息安全的整体解决方案，包括但不限于信息安全管理和技术架构规划、信息安全管理体系建设、信息安全管理和技术评估、信息安全度量等。从客户面临的内外部挑战，开展风险评估，分析和设计信息安全发展规划和实施路径，协助客户进行落地实施，以及开展效果后评估

-负责提供IT风险管理咨询服务，基于客户需求，开展系统建设评估和优化、信息科技风险管理体系建设、信息科技风险管理评估、IT审计、合规遵从性评估等，涉及领域包括IT治理、IT风险管理、系统开发、系统运维、信息安全、数据安全、业务连续性等

-负责灵活运用专业能力和方法，为客户提供定制化的信息安全与IT风险技术咨询服务

职位要求

-本科及以上学历，信息系统、计算机科学、信息管理、统计学相关专业优先

-3-5年及以上信息安全和IT风险管理工作经验，金融行业从业经验优先考虑

-具有CISSP、CISA、CISM、ITIL、ISO27001LA等相关资质优先考虑

-熟悉操作系统、数据库、中间件等安全配置，熟悉系统安全开发过程，熟悉漏洞扫描和应用渗透测试等各项专业技能

-熟悉信息安全相关法律法规、监管条文、国际标准，包括网络安全法、ISO27000、等级保护等相关标准，以及银保监会等监管制度