포지션 상세
Key points and objectives of the position
• As ISO Deputy, coordinate and drive information security activities both within the IT department as well as with the general organization (MBK).
• Coordinate Local information security forum (MBK Excom).
• Report measures and status on information security activities to regional and global stakeholders.
• Provide consultation and communication on RISE policies and related changes, and enhance organizational understanding and awareness.
• Manage and report cybersecurity KPIs and performance status, and propose improvement measures to support target achievement.
• Provide the necessary information to ensure that information security requirements are reflected in Operational Plan (OP) budget planning.
• Conduct regular compliance reviews for projects involving IT.
• Perform AMBISS (internal information security audits) and manage follow-up actions.
• Conduct regular self-assessments.
• Support global and local security awareness campaigns in collaboration with the BISO and Global Cyber Security organization.
• Manage local information security risks.
• Establish and regularly operate an information security forum for MBK management.
• Stay informed of the latest security trends and policy updates through the Global Cyber Security social intranet, LISO-ITSO monthly exchange meetings, annual security conferences, and other relevant channels.
• Track and manage remediation activities for cybersecurity issues and risks identified through key security KPIs, including EPA, SCAS, CIVA-I, and ITSCM.
• Establish relevant processes and methodologies to strengthen cybersecurity.
• Assess and manage the security posture of external vendors that process personal data.
• Analyze security risks and provide guidance across a wide range of business projects.
• Perform OT security activities for the PDC in collaboration with GCSP.
• Several years of relevant work experience in cybersecurity policy, standards, compliance, legal, or risk management functions.
• Experience in developing policies and standards.
• Experience with interpretation of regulatory requirements and guidance with support from legal.
• Experience in defining and delivering impactful cybersecurity awareness materials and campaigns.
• Strong cybersecurity governance, risk, and compliance experience in a large complex business organization.
• Experience in identifying, evaluating, and managing risk in a complex and changing environment.
• Experience with the definition and identification of high value information assets.
• Experience with third party management frameworks.
• Experience discerning an organization's protection needs (security controls) for information systems and networks.
• Fluent in English (both written & speaking).
• Knowledge of Houston methodology and toolset.
• Process/Change Management.
• IT Performance Assessment (Models and Methods).
• ITS Wide-standards (Processes and policies).
• As ISO Deputy, coordinate and drive information security activities both within the IT department as well as with the general organization (MBK).
• Coordinate Local information security forum (MBK Excom).
• Report measures and status on information security activities to regional and global stakeholders.
주요업무
• Contribute to the development of Mercedes-Benz's cybersecurity strategy and support the implementation of security policies and activities within the responsible area.• Provide consultation and communication on RISE policies and related changes, and enhance organizational understanding and awareness.
• Manage and report cybersecurity KPIs and performance status, and propose improvement measures to support target achievement.
• Provide the necessary information to ensure that information security requirements are reflected in Operational Plan (OP) budget planning.
• Conduct regular compliance reviews for projects involving IT.
• Perform AMBISS (internal information security audits) and manage follow-up actions.
• Conduct regular self-assessments.
• Support global and local security awareness campaigns in collaboration with the BISO and Global Cyber Security organization.
• Manage local information security risks.
• Establish and regularly operate an information security forum for MBK management.
• Stay informed of the latest security trends and policy updates through the Global Cyber Security social intranet, LISO-ITSO monthly exchange meetings, annual security conferences, and other relevant channels.
• Track and manage remediation activities for cybersecurity issues and risks identified through key security KPIs, including EPA, SCAS, CIVA-I, and ITSCM.
• Establish relevant processes and methodologies to strengthen cybersecurity.
• Assess and manage the security posture of external vendors that process personal data.
• Analyze security risks and provide guidance across a wide range of business projects.
• Perform OT security activities for the PDC in collaboration with GCSP.
자격요건
• Completed university degree in Computer Science, Information Systems, Computer Engineering, Information Security, Cybersecurity or a related field is required.• Several years of relevant work experience in cybersecurity policy, standards, compliance, legal, or risk management functions.
• Experience in developing policies and standards.
• Experience with interpretation of regulatory requirements and guidance with support from legal.
• Experience in defining and delivering impactful cybersecurity awareness materials and campaigns.
• Strong cybersecurity governance, risk, and compliance experience in a large complex business organization.
• Experience in identifying, evaluating, and managing risk in a complex and changing environment.
• Experience with the definition and identification of high value information assets.
• Experience with third party management frameworks.
• Experience discerning an organization's protection needs (security controls) for information systems and networks.
• Fluent in English (both written & speaking).
• Knowledge of Houston methodology and toolset.
• Process/Change Management.
• IT Performance Assessment (Models and Methods).
• ITS Wide-standards (Processes and policies).
