Senior Information Security Engineer/Auditor
SGS｜Taiwan's largest testing, verification, and inspection services company
TAIWAN'S LEADING TESTING, INSPECTION AND CERTIFICATION COMPANY. We are always committed to exceeding the expectations of our customers and society, and providing excellent market services. As an industry leader, SGS provides professional business solutions to help improve product quality, safety, and productivity, and to reduce risks; navigating customers through an increasingly regulated international market. Our independent and impartial services provide special value to customers and ensure the sustainable development of their businesses. Management Philosophy
Our goal is to become the most competitive and productive service organization. Continuously improving our core capabilities in inspection, testing, and certification to provide the best service is our essence. Our competitiveness and the continuous provision of unparalleled service to our customers will be the key to determining our leading position in the minds of both local and multinational customers. SGS's main core businesses consist of the following three categories:
Testing
Our global service network, laboratory equipment, and highly knowledgeable and experienced professionals help you reduce risks, shorten time-to-market, and provide laboratory testing for your product quality, safety, and performance based on relevant health, safety, and regulatory requirements.
Certification
We are one of the world's most credible certification bodies. Through professional certification and rigorous audit services, we ensure that your company's and organization's products, processes, services, or systems comply with international standards, domestic regulations, and stakeholder requirements.
Inspection
We provide world-leading comprehensive inspection services, such as inspecting the condition and weight of goods during transit to assist in controlling quantity and quality, meeting all relevant regulatory requirements of different regions and markets. Taiwan Distribution
In 1952, the SGS Group established SGS Far East Notary Co., Ltd. in Taiwan, setting up branch offices in the three major cities of Taipei, Keelung, and Kaohsiung during its early stages. To keep pace with the upgrading of domestic industries and internationalization needs, Taiwan Inspection Technology Co., Ltd. was established in May 1991 to expand the provision of professional testing and technical services. In 2016, Chengzhi Technology Co., Ltd. joined the SGS Group, making our services in the Taiwan electronics and electrical field more complete.
SGS plays an important role in Taiwan's economic growth, assisting manufacturers in complying with government regulations, expanding exports, and improving quality. In the future, we will continue to uphold the excellent traditions of SGS and contribute to the future economic development of Taiwan. For more information, please visit the SGS Taiwan official website: SGS Taiwan Inspection Technology - The world's leader in testing, verification, and inspection services
【Main Responsibilities】
Work with SGS customers in Taiwan and the Asia-Pacific region to provide business cybersecurity assessment, inspection, and certification services as well as solutions for equipment, infrastructure, and cloud security. Responsible for assessing the security of customer organizations and products:
- Assess the cybersecurity of organizations, processes, and products.
- Develop cybersecurity services: security assessment, penetration testing, and vulnerability assessment for various IoT devices.
- Develop/maintain cybersecurity assessment methodologies that comply with global cybersecurity requirements and regulations.
- Maintain an internal cybersecurity knowledge base, including vulnerabilities, cryptography, secure elements, etc.
- Ensure work quality complies with global SGS internal cybersecurity standards.
- Serve as a lecturer and subject matter expert for internal and external stakeholders.
- Promote technical support for global cybersecurity services.
【Required Skills or Experience】
- Work experience in cybersecurity, privacy, and ISO auditing.
- Understanding of threat modeling methodologies (e.g., STRIDE, DREAD, etc.).
- Understanding of security/privacy standards, including ISO27001, ISO 27701, IEC 62443, or other IT practices.
- Understanding of the latest security principles, technologies, and concepts; practical experience in vulnerability assessment and penetration testing; familiarity with security assessment tools, scripting, etc.
- Understanding of PKI infrastructure, cryptographic protocols, and hardware roots of trust.
- Understanding of compliance requirements and regulations in different regions.
- Experience in communicating information and preparing cybersecurity-related reports.
- Possession of one or more certifications: CISSP, CISA, CCSP, or CEH.
- Familiarity with process maturity models and risk management.
- Experience in project management and relationship management.
【We Hope You】
- Graduated in Electrical Engineering, Computer Engineering, IT Security, or related fields.
- Experience in automotive, industrial, or medical field solutions will be preferred.
- Able to work independently, possess teamwork spirit, and work according to prescribed procedures under pressure.
- Able to multitask, determine priorities, and effectively manage your own and the team's time.
- Must be fluent in English; knowledge of other languages will be an advantage.
SGS Values Passion Integrity Entrepreneurship Innovative Spirit
Benefits Company System: Two days off per week, working hour system better than the Labor Standards Act Insurance System: Labor Insurance, Health Insurance, Group Insurance Bonus Benefits: Year-end bonus, festival gift vouchers, birthday gift vouchers Allowances: Marriage gift money, maternity allowance, work-related injury compensation, funeral condolence money Leave Benefits: Employees enjoy special leave, with the number of days increasing based on seniority Transportation Benefits: Comfortable and convenient shuttle buses in the Greater Taipei area, providing free point-to-point commuting Leisure and Recreation: Employee travel subsidies, diverse club activities, year-end party Education and Training: New employee training, management courses, sales skill training, professional education and training courses, celebrity lectures, seminars, English course tuition subsidies Employee Development: Smooth promotion channels, multinational internal transfer opportunities, diverse career planning Employee Care: Regular employee health check-ups, on-site doctor services, nurse health consultation management services, nursing rooms, medical rooms, Automated External Defibrillators (AED), and annual education and training, professional health lectures