Responsibilities
• 为金融行业客户提供IT咨询服务，如安全转型，身份和访问管理（IAM），网络威胁分析和管理（CTM），数据丢失预防（DLP）和弹性等。
• 帮助我们的客户设计他们的网络安全战略和路线图，管理安全项目，进行差距分析，设计过程集成和进行培训和研讨会;或从技术角度，设计客户的安全架构，实施和定制安全解决方案等。
• 展示和应用对复杂网络安全解决方案和框架系统（包括风险管理和内部控制）的彻底了解，使用当前业务/ IT环境的知识和行业趋势，识别参与和客户服务问题，并将此信息通过书面信件和口头陈述传达给参与团队和客户管理。
• 拥有较强项目管理技能，能激励团队合作和责任与参与团队成员，并使用当前的技术和工具，以提高可交付成果和服务的有效性。
• 与其他团队成员合作开发服务建议，参与文档和报告
• Provide IT advisory services to client with a focus in Financial Services, such as security transformation, Identity and Access Management (IAM), Cyber Threat Analytics and Management (CTM), Data Loss Prevention (DLP) and Resilience etc.
• Help our clients to design their cyber security strategy and roadmap, manage security project, conduct gap analysis, design process integration and conduct training & workshops; or from a technical perspective, to design client’s security architecture, implement and customize security solutions etc.
• Demonstrate and apply a thorough understanding of complex cyber security solutions and framework systems (including risk management and internal controls), use knowledge of the current business/IT environment and industry trends to identify the engagement and client service issues and communicate this information to the engagement team and client management through written correspondence and verbal presentations.
• Demonstrate and apply strong project management skills, inspire teamwork and responsibility with engagement team members and use current technology and tools to enhance the effectiveness of deliverables and services.
• Collaborate with other team members to develop service proposals, engagement documentation and reports

任职要求：
• 商业，会计，金融，计算机科学，信息系统，工程或相关学科和/或专业认证的学士学位。 
• 至少有5年的网络安全/风险或IT /运营/管理咨询经验。
• 在以下任一工作中应用相关知识的实践经验有加分：（a）身份和访问管理（IAM）解决方案咨询和实施; （b）网络威胁分析和管理（CTM），包括渗透测试，脆弱性管理，SIEM，事件响应，威胁情报; （c）数据保护和隐私咨询; （d）移动安全; （e）云安全; （f）其他安全相关领域。
• 理解网络安全工业实践者优先。
• 较强项目管理技能。
• 较强沟通能力和表达能力。
• 具有领导力和客户服务能力。
• 为人诚信、正直，保持专业。
• 良好的中英文书面和口语表达能力。
• Bachelor's Degree in business, accounting, finance, computer science, information systems, engineering, or a related discipline and/or a professional certification e.g. CISSP, CISA, CISM, CEH, PMP, CIPM, and ISO 27001/20000 leader auditor.
• A minimum of 5 years’ experience working on cyber security / risk or IT/operation/management consulting.
• Hands-on experience in applying relevant knowledge in at least one of the following engagements is an advantage: (a) Identity and Access Management (IAM) solution consulting and implementation; (b) Cyber Threat Analytics and Management (CTM) including penetration testing, vulnerability management, SIEM, incident response, threat intelligence; (c) Data Protection and Privacy consulting; (d) mobile security; (e) cloud security; (f) other security related areas.
• Good understanding of industrial practice in cyber security is an advantage.