Job Information
The Coca-Cola Company Manager, Security Engineer in Shanghai, China
The Security Engineer will directly support organization-wide initiatives in delivering Security solutions in Greater China, and responsible for designing and implementing secure cloud computing solutions. You should have broad experience with IT security technologies and operations including but not limited to, endpoint security solution and controls, client-server computing, network security platform, cloud security solution and controls (SaaS/PaaS/IaaS), etc. This position will create and maintain a security plan, assess security risks, and implement risk management strategies. This position will also work with teams to ensure compliance with security protocols, policies, and procedures and help achieve/maintain the necessary compliance certification.Job Responsibilities
Collaborate with IT operations, legal, and other engineering teams to define and implement security solutions.
Collaborate with various teams to ensure security standards are met across all projects.
Assess vulnerabilities/risks that could affect the integrity, availability, or confidentiality of data, systems, or services of the company and provide mitigation solutions.
Develop and maintain security policies, procedures, and standards for Azure China cloud environments (21Vnet).
Responsible for input and feedback on security architectures.
Responsible for the thorough documentation of implementations, via technical documentation and run books.
Analyze and resolve security issues and incidents and provide recommendations for remediation and prevention.
Perform security assessments and audits of cloud infrastructure and applications and ensure compliance with regulatory and contractual requirements.
Research and evaluate new security technologies and trends and provide guidance and training to other engineers and developers.
Job Requirements
Bachelor's degree in computer science, information security, or related field, or equivalent work experience.
Minimum 3 years of working cybersecurity experience.
Technical or engineering background, including software development, scripting, networking, and cloud architecture.
Strong knowledge of cloud security concepts, principles, and best practices, such as security by design, defense in depth, and least privilege.
Prior experience with MLPS and CIC regulations is a plus.
Fluent in both oral and written English & Chinese
Certified CISA, CISSP, CISM are preferred.
We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race, color, sex, age, national origin, religion, sexual orientation, gender identity and/or expression, status as a veteran, and basis of disability or any other federal, state or local protected class.