Global\n Job Title: Advanced Cyber Sec\n Archt/Engr
1. Tag Lines
• Driving Infinite Possibilities Within A Diversified, Global\n Organization
2. Essential Functions of the Job
• Drive technical initiatives for corporate cyber security\n within China, to ensure the company is in full compliance with MLPS 2.0 and\n all other applicable China regulation requirements.
• Conduct regular cyber security assessment as required and deliver annual\n cyber security assessment result with key stakeholders, incl. the Multi-level\n Protection Scheme assessment, Industrial Control System assessment over\n Operational Technology, etc.
• Architect and design secure solutions using industry best practices and\n knowledge of Enterprise IT and HGS policies, standards and baselines, and\n interpretation of external regulation requirements, incl. supporting the\n local Security Service Reviews when needed.
Provide technical consultation, guidance, and assistance to management,\n business unit contacts and internal customers to ensure the protection of\n Honeywell by integrating controls, processes, and procedures into all\n services and products used by the enterprise.
• Support cyber security relevant certification/qualification assessment\n and ad hoc response to external parties.
• Participate in incident response and handling as needed.
3. Impact\n Statements
• You are pivotal in safeguarding Honeywell's\n information assets from ever-evolving cyber threats, providing a strong\n foundation for business continuity and growth.
• With the increasing frequency and sophistication\n of cyberattacks, you play a crucial role in ensuring the Honeywell's security\n posture is resilient and up-to-date, and are responsible for designing\n security controls, identifying potential risk and delivering mitigation\n suggestions that helps to reduce the risk of cyber threats and ensure\n compliance with China regulation requirements.
• As a key player in the Honeywell Global Security\n team, you are responsible for balancing security measures with business\n needs, ensuring a comprehensive security strategy that is aligned with the\n organization's goals and objectives, and enabling the organization to operate\n with cyber security confidence and trust.
4. Job\n Activities
• 70% Support MLPS 2.0 compliance activities, conduct regular MLPS 2.0\n self-assessment for in-scope information systems, align mitigation\n suggestions with key stakeholders and track for compliance status.
• 15% Review architecture of China technical\n solutions, deliver technical guidance to ensure build in China specific\n external regulation requirements in design phase.
• 5% Support China regulation required other\n assessments related to cyber security and data protection, formal\n certification/qualification assessment and ad hoc response to external\n parties.
• 5% Support incident response and handling as needed.
• 5% Deliver regular reportings to leadership on potential security\n risk, project progress, security posture and other metrics related to China\n region cyber security.
5. You Must Have
• Bachelor's degree with a minimum of 5+ years experience in a security\n field.
• At least one of the following certifications is required: CISSP, CCSP,\n CISA, CISM, CRISC and CDPSE.
• Familiarity with China regulation requirements related to cyber security\n and data protection.
• Strong communication skills with leaders and key stakeholders, in both\n Mandarin and English.
• Effective partnership building skills with the key stakeholders.
• Global mindset and experience working with multiple regions and time\n zones required. Time zone compatibility/flexibility to communicate with\n application, process and service owners, IT/Security leaders and external\n customers, etc.
6. We Value
• Masters or Doctorate degree in an engineering, technical or\n security program.
• Advanced architecture experience with large\n scale, global implementations.
• Exceptional planning and organization skills.\n Ability to start and persist with specific courses of action while exhibiting\n high motivation, sense of urgency, and ownership.
• Strong analytical, persuasion and negotiation\n skills.
• Strong problem-solving skills.
• Demonstrated strong interpersonal skills,\n including the ability to effectively listen and communicate with others to\n resolve conflicts in a professional manner.
• Aptitude/willingness to learn, customize, and\n develop new processes, methodologies, and technologies.
• Strong leadership skills but can take direction\n & participate on teams. Comfortable interacting with and presenting to\n senior management.