[KKCompany] Senior Information Security Specialist - KKCompany｜Meet.jobs

KKCompany is Asia’s leading music entertainment company. Started by a group of music loving Internet software developers, we built and launched one of the world’s first music streaming services in 2005. Based in Taipei, the heart of Chinese pop music, we gradually grew our business from Taiwan out to Hong Kong, Singapore, Malaysia and Japan. Ever curious towards reinvention and discovering new business models of the future, we have expanded our business scope from music streaming to live events, technology services, content, investments and continue to explore reinvention through innovation in the digital entertainment space.

We are seeking a Security Engineer with experience to help KKCompany companies improve our security operations that focus on system protection, incident responding, policies and procedures, which keeps us away from the business risks. In this role, you will work with both management support units and other business units to execute the group-level security plans. You will design security policies, implement related practices, investigate security events, and provide security training to the employees, in order to strengthen our digital resilience.

We are finding partners who love to

• Collaborate with cross-functional teams to deliver new processes and systems.
• Lead projects, set direction, manage cross-project priorities, deadlines and deliverables.
• Foster a culture of strong team collaboration and technical excellence.
• Adapt technology and methodology to solve the real world problems.
• Know WHY more than HOW, both in technical and non-technical domain.
• Take new problems or inexperienced skills as opportunities to learn and to share.
• Have the growth mindset to embrace any possibilities and willing to communicate.

Responsibilities:

- Security issue management
- Conduct regular security assessments
- Internal security education training program
- Design and execute security audit programs
- Design security related policies and guidelines
- Design or review security related workflow and SOP
- Compliance with ISO 27000 series ISMS, NIST or other ISMS frameworks



Requirements:

- Excellent communication skills
- Excellent English reading and good English writing
- Experience in ISMS implementation and compliance
- Familiarity with developing and implementing security procedures and policies
- Familiarity with security frameworks like ISO 27000 series, PCI-DSS, NIST CSF
- 2+ years of work experience in information security, auditing, compliance, or similar capacities
- B.S. or M.S degree in Computer Science, Security related field, or equivalent practical experience



Nice To Have:

- CISSP, CISA, or CEH certification
- ISO/IEC 27000 series lead auditor certification
- Ability to discuss, explain and summarize complex, technical topics
- Familiarity with issue tracking / project management tools like: GitLab, Trac or Jira

*** The salary range is for reference and the actual salary will be further discussed with the candidate***