S A&R, Leakage Manager(003914)

Job description

位于南京的巴斯夫中国数字化中心吸引、培养和发展充满热情的数字化人才，他们将对巴斯夫的数字化未来产生深远的影响。快来加入我们，成为巴斯夫数字化之旅的一部分。

Digital Hub China in Nanjing attracts, grows, and develops passionate people who will meaningfully impact the digital future of BASF. Come join us and be a part of our digitalization journey.

Objectives:
数字化将成为巴斯夫DNA的真正组成部分，创造令人兴奋的全新客户体验和业务增长，并提高流程效率。全球数字服务正在支持巴斯夫业务的数字化转型。我们的使命是推动巴斯夫的数字化转型，通过强大的敏捷文化，提供创新的、全球性的、高质量的数字化产品和服务。南京数字中心是我们为巴斯夫提供区域和全球解决方案的全球重要基地之一。

在此职位上，您将专注于以下目标

信息泄露：

建立结构，通过从来源获取情报（例如DCSO，负责任的披露）来管理意外泄漏，并确定泄漏率高的供应商，业务部门等

设计量身定制的组织和技术措施（例如广泛监测，增加意识培训），以应对高风险地区

实体泄漏：

设计结构，从来源（例如DCSO，Prodaft，Offsec，TIO）获取有关巴斯夫员工，承包商和消费者泄露证书的情报，并向事件报告，以便快速进行损害控制和补救措施

建立流程，在帐户接管攻击开始或泄露的信息开始通过组合列表传播之前，警告有风险的员工、门户所有者和消费者有关其泄露凭据的可用性

建立结构，对泄露的数据进行统计分析，以识别高风险的子公司，领域和员工，并允许有针对性的预防方法

服务改进：

进一步开发并优化用于识别信息和身份泄漏的来源

与业务利益相关者、风险、合规和安全官员建立关键利益相关者关系，以了解数据的存储位置和方式

建立并推进应用损害控制和补救措施的过程

Main Tasks:
您将负责我们的信息和身份泄露管理流程的日常执行

您将负责协调和跟踪中国境内所有公开调查结果，包括与相关数据所有者的联系

您的部分活动将是报告关键指标，以跟踪我们的未结项目并查看流程的运行情况

您将与第三方供应商联络，并建立/维持良好的工作关系

作为我们CISO组织的一部分，您将与网络安全防御中心，网络安全治理以及我们的IT运营部门密切合作

Digitalization will be a true part of BASF’s DNA that creates new exciting customer experiences and business growth as well as drives efficiencies in processes. Global Digital Services is supporting BASF business in Digitalization transformation. Our mission is to drive forward the digital transformation of BASF, providing innovative, global and high-quality digital products and services through a strong agile culture. The Digital Hub Nanjing is one of our global key locations to deliver regional and global solutions for BASF.

In this role, you will focus on the following objectives

Information leakage service:

Set up structure to manage accidental leaks through ingesting intelligence from sources (e.g. DCSO, responsible disclosure) and to pin down suppliers, business units etc. with high leak rates

Design tailored organizational and technical measures (e.g. extensive monitoring, increased awareness training) to subjugate high-risk areas

Identity leakage service:

Design structure to ingest intelligence from sources (e.g. DCSO, Prodaft, Offsec, TIO) regarding leaked credentials of BASF employees, contractors & consumers and to report incidents to for rapid damage control & remediation measures

Establish process to warn at-risk employees, portal owners & consumers about the availability of their leaked credentials before account-takeover attacks begin or leaked information starts to propagate through combo lists

Set-up structure to conduct statistical analysis of the leaked data to identify high-risk subsidiaries, domains & employees and allow for targeted prevention methods

Service improvement:

Develop further and optimize the sources used to identify information and identity leaks

Develop key stakeholder relationships with business stakeholders, risk, compliance and security officers to understand where and how data is stored

Establish and advance the process for applied damage control and remediation measures

Main Tasks:
You will be responsible for the day-to-day execution of our Information and Identity Leakage Management process

You will be responsible to coordinate and track all open findings within China, including contact with relevant data owners

Part of your activities will be the reporting of Key Indicators for tracking our open items and to see how the process is running.

You will liaise with 3rd party vendors and establish/maintain good working relationships.

As part of our CISO Organization you will closely work together with the Cyber Security Defense Center, Cyber Security Governance as well as our IT operations unit.

您已完成与学科相关的学位或通过多年的相关专业经验和进一步培训获得的同等知识和技能

您在合规评估或其他相关网络安全领域至少有 3-5 年的经验

您必备的技能：

您已完成与学科相关的大学/技术学院学位（商业）信息学或通过多年的相关专业经验和进一步培训获得的同等知识和技能

公认的认证证明，如CISSP，CISM，CRISC，CISA或其他将是一个加分项

信息安全管理实践和相关规范和标准的知识

您具备出色的沟通技巧，能够与巴斯夫整个组织的利益相关者保持一致并进行沟通

希望您拥有：
公认的认证证明，如CISSP，CISM，CRISC，CISA或其他将是一个加分项

You have completed a subject-related university/technical college degree in (business) informatics or equivalent knowledge and skills acquired through many years of relevant professional experience and further training.

You have a minimum of 3-5 years’ experience in compliance assessments or other relevant cyber security fields

Mandatory

You have completed a subject-related university/technical college degree in (business) informatics or equivalent knowledge and skills acquired through many years of relevant professional experience and further training.

Proof of recognized certifications such as CISSP, CISM, CRISC, CISA or others would be a plus.

Practice in information security management and knowledge of relevant norms and standards.

You have great communications skills to align and communicate with stakeholders throughout BASF's organization.

Nice to have

Proof of recognized certifications such as CISSP, CISM, CRISC, CISA or others would be a plus.

巴斯夫中国数字化中心于2020年在南京成立。作为全球数字中心的重要部分，中国中心正在迅速发展中，未来将会有更多岗位开放。巴斯夫专注于数字化和创新的IT解决方案，以增强巴斯夫在中国的IT化和专业化，为巴斯夫带来了一支全方位的数字化人才团队，在中国独特的数字化环境中创造解决方案。中心还为湛江一体化基地等大型项目的智能制造做出贡献。

在巴斯夫，我们为可持续发展的未来，创造化学新作用。我们将经济成功与环境保护相结合。我们肩负社会责任。巴斯夫集团超过110，000名员工为巴斯夫的成功做出了贡献。我们的客户遍布世界上几乎所有行业和几乎每个国家。我们的产品组合分为六个部分：化学品，材料，工业解决方案，表面活性剂，营养与护理以及农业解决方案。巴斯夫2020 年销售额为 590 亿欧元。更多信息请见 www.basf.com。

Digital Hub China was founded in 2020 in Nanjing. As part of the Global Digital Hub Verbund, the hub is rapidly growing with a target of a three-digit number of employees in coming years. Focused on digitalization and innovative IT solutions to enhance BASF’s IT portfolio and expertise in China, it brings an all-around capable team of digital talents to create solutions in the context of China’s unique digital landscape to BASF. It also contributes to the smart manufacturing endeavors for the new mega project in Zhanjiang.

At BASF, we create chemistry for a sustainable future. We combine economic success with environmental protection and social responsibility. More than 110,000 employees in the BASF Group contribute to the success of our customers in nearly all sectors and almost every country in the world. Our portfolio is organized into six segments: Chemicals, Materials, Industrial Solutions, Surface Technologies, Nutrition & Care and Agricultural Solutions. BASF generated sales of €59 billion in 2020. Further information at www.basf.com.

BASF Asia-Pacific Service Center is based in Malaysia, we may reach you via Malaysia phone number.

请时刻警惕任何可能的招聘欺诈行为！请注意，巴斯夫绝不会在任何情况下向候选人以任何形式收取任何费用。