IT Security Professional

Mission:

In thisposition, you will work with us to accomplish the following missions:

1. Tominimize information security risks for Healthineers' business in Japan inaccordance with Siemens Healthineers' security policy

2. Leadthe execution of information security activities necessary to achieve this, in alignmentwith the IT Security team in Asia Pacific and local stakeholders

3. MaintainIT Security KPI’s for Japan IT organization as defined by our global group

Responsibilities:

To achievethese missions, you will be responsible for the following tasks:

・ Support the implementation of Information Security governancepolicies, guidelines, etc. focused on Japan

・ Drive analysis and handling of security vulnerabilities &incidents in the country and across Asia Pacific

・ Support procurement and service management during the analysis ofthird-party suppliers, offers & contract drafting regarding IT Security

・ Plan and perform threat & risk analysis, define countermeasuresin line with risk acceptance criteria and review security exceptions

・ Provide guidance to project teams during development/release of ITServices regarding cybersecurity (e.g. protection concept, securityspecifications, architecture and design, implementation, test cases,documentation)

・ Support Business Partner Managers (BPMs) and Business ApplicationOwners to fulfill security requirements in our applications and IT/OTinfrastructure and implement effective mitigation measures to prevent securityincidents such as ransomware attacks

・ Support Projects (IT, Business) with external third-party riskassessments (e.g. Cloud/SaaS/Provider)

・ Promoting education and awareness of information security toemployees

・ Support data privacy analysis & clearance of IT services

・ Support in case of Asia Pacific IT Security audits

・ Keeps abreast of industry and legal trends around IT Security

ApplicantEligibility

[MUSTHAVE Requirement].

・ 3+ years of experience in a security engineering position or similar

・ Knowledge about common security incidents (e.g. ransomware attacks)and vulnerabilities

・ Experience with security risks in cloud environments and able toassist during a potential security incident in the cloud

・ Independent and self-motivated person, willing to create impact onhis / her daily work

・ Previous cybersecurity risk management experience is desirable

[LanguageProficiency]

・ Fluent Level of English and Japanese(speaking,discussion, presentation and writing)

Req: 23H032