Cyber Security Risk Analyst

Job description

3325074
Additional Cities

Shanghai
Career Level

Experienced
Relocation Assistance

No
Business

GE Digital
Business Segment

Digital Technology
Function

Digital Technology
Country/Territory

China
Additional States/Provinces

ShangHai
Postal Code

201203
Role Summary/Purpose

The Risk Analyst will be responsible for the execution of risk assessments and security reviews with a focus on China cybersecurity law and related regulations. This will include performing research on regional regulatory requirement and risk management activities designed to improve risk posture while clearly communicating recommendations to leadership.
Essential Responsibilities

• Work as an SME responsible for regularly providing latest update to different stakeholders and leadership on regulatory and compliance requirement of China Cybersecurity Law (CSL) and its related industrial regulations and standards.
• Develop and maintain risk assessments related to CSL and ensure they are aligned to enterprise security standards and industry best practices.
• Aid in the development and enforcement of GE-wide policies & standards and assist technology teams with building security solutions.
• Define technology security requirements and communicate to system owners through effective security programs and training.
• Work with GGO and business IT teams to encourage a security mindset throughout business SDLC processes from concept, implementation and operations.
• Maintain documentation of the IT Risk program and any exceptions for regulatory compliance.

#DTR
Qualifications/Requirements

• Legal authorization to work in the China is required. We will not sponsor individuals for employment visas, now or in the future, for this job
• Must be willing to in an office located in Shanghai, China
Desired Characteristics

• Bachelor’s degree in Business, Law, Sciences or Information Technology
• Experience on China Cybersecurity Law
• Familiar with basic cybersecurity risks and controls framework (e.g. ISO 27000, NIST 800-53, etc.)
• Experience in identification and remediation of security threats and risks
• Ability to travel 10% of the time in the region as needed
• CISSP/CISM/CISA certification is a plus
About Us

GE (NYSE:GE) drives the world forward by tackling its biggest challenges. By combining world-class engineering with software and analytics, GE helps the world work more efficiently, reliably, and safely. GE people are global, diverse and dedicated, operating with the highest integrity and passion to fulfill GE’s mission and deliver for our customers. www.ge.com
Primary State/Province

Shanghai
Primary City

Shanghai