 
 
工作职责:
                    OMNIVISION is a leading developer of advanced digital imaging solutions.  They provide a diverse culture that works together on the development of cutting-edge imaging technology, products and solutions.  At OMNIVISION, they know that happy employees are critical to success, so they have created a culture focused on three tenets: Thrive, Engage, Innovate.  
OMNIVISION’s Information Security organization is looking for a Sr. Information Security Analyst to join its team.
Core responsibilities include:
Vulnerability Management:
-	Operates, Administers and Manages the tools related to Vulnerability Management Program.
-	Operating vulnerability management processes, suggesting applicable change controls, and security exceptions.
-	Designing and implementing vulnerability reporting and monitoring solutions.
-	Maintaining and updating process guides and assisting with reporting to leadership and other stakeholders.
-	Improving business-wide knowledge and understanding of emerging threats.
User Awareness:
-	Using a risk-based approach, establish and drive a culture of security across OMNIVISION that drives secure behaviors throughout the workforce.
-	Establish a best in-class approach to delivering security concepts and skills to end users through clear, accessible and engaging messaging
-	Demonstrated capability in implementing and managing phishing training programs
-	Demonstrated experience in creating, publishing, maintaining, and managing information security awareness training modules and related content.
Regulatory Compliance and Advisory:
-	Stay abreast of the latest cybersecurity regulations and standards in China.
-	Advise on compliance with Chinese cybersecurity laws and regulations.
-	Work closely with IT, legal and compliance teams to ensure organizational adherence to regulatory requirements.
                
任职资格:
                    Minimum Qualifications:
-	8 years of experience in the Information Technology or Information Security space 
-	Experience in managing technical solutions like Tenable Nessus, Crowdstrike Exposure Management, Rapid 7 Nexpose, Proofpoint Security Awareness, KnowBe4
-	Strong understanding of technical concepts with focus on Cloud, Networks and System Administration
-	Experience working in distributed and Global workforce
-	Ability to balance a variety of due dates, and requirements while working on various tasks
-	Good command of English in Listening, Speaking, Reading, and Writing.