logo of schneider

施耐德Product Security Expert

社招全职 Schneider Electric状态:招聘

任职要求


1. Bachelor's or higher degree in Computer Science, Software Engineering, Electronic Information Engineering or Cybersecurity; 2. At least 5+ years of hands-on experience in a similar role; 3. Proven experience of working in an Engineering/R&D department following a Secure Development Lifecycle based on standards such as IEC 62443-4-1, ISO 21434, or Microsoft SDL with a proven ability to engage with management and development teams; 4. Demonstrated project management, communication and teamwork skills, including the ability to write concise reports, summaries, and prese…
登录查看完整任职要求
微信扫码,1秒登录

工作职责


1. Identify, assess the product security related risk and drive the risk mitigate 2. Monitor product security related compliance to local Laws/Regulations/National Standards,and convert local cyber、data protection & privacy demand into product requirement, guarantee compliance 3. Act as relay among Product Security stakeholders, communicate, coordinate, facilitate and support BU CSOs, Product Owners, Security Data Privacy Advisors, R&D for FCSR, SDL and other product security initiatives & topics 4. Act as local owner & coordinator to handle severe product security issues 5. Drive the SDL deployment in China C4C offer creation projects 6. Monitor local SDL maturity and drive action plan to improve
包括英文材料
相关职位

logo of alibaba
社招LAZADA

The Assortment, Content & Ads Governance Team (ACAG team) is part of the Lazada’s Risk and Security, and it is charged with the mission of developing a comprehensive strategy for Lazada with regards to assortment, so as to foster a healthy and safe e-commerce environment for our users. The role is responsible for developing and implementing proactive strategies and operational processes to protect users from Assortment and Content related risks (Prohibited and Controlled Goods, IP infringement products, hate speech etc). You will have access to analytical tools to develop and implement strategies and solutions using data driven methodologies to mitigate the risks associated with platform assortment and content. Responsibilities: - Develop a deep understanding of the eCommerce customer and seller journey, including registration and onboarding, product listing, order placement, payment, user interactions, returns and refunds, user reports and feedback, etc. - Develop subject matter expertise on eCommerce platform operation and governance, where rules, strategies, and enforcements are effectively established to ensure users are compliant with platform policies. - Lead cross-functional efforts to enhance platform policies and operational mechanisms, fostering a collaborative environment to support ongoing strategy refinement. - Work with large data sets to analyze patterns, trends, and modus operandi of platform operation and governance issues (as well as merchants who perpetrate these issues). - Make data-driven recommendations on prioritization of controls for platform governance and product compliance. - Collaborate with PD, Tech, and Algo counterparts to build machine learning models and rules to detect assortment and user related operation and governance issues on the platform. - Operate the risk engine, including the creation and continuous evaluation of rules to prevent and detect platform operation and governance issues. - Capture and communicate findings with internal and external stakeholders through dashboards, periodic reports, and presentations.

更新于 2025-06-16曼谷
logo of alibaba
社招10年以上LAZADA

1. 安全战略落地与能力迁移 ○ 基于集团已确立的国际化安全战略,协助制定落地路线图; ○ 协同阿里控股安全团队将国内成熟的基础安全平台能力(如办公安全、生产安全、数据安全等)迁移至国际业务场景,实现“能力出海”。 2. 全球基础安全体系建设 ○ 搭建适配海外市场的基础安全体系,包括访问控制、数据保护、日志审计、威胁监测等; ○ 支撑 Lazada、AliExpress、Miravia等多区域业务的安全能力统一与差异化融合。 3. 产品与平台国际化适配 ○ 推动已有安全能力的国际化重构与组件解耦(语言、部署、合规、接口标准等); ○ 指导控股安全平台产品形成海外通用输出形态,如SaaS化/轻代理/API服务化等。 4. 合规与数据主权落地 ○ 结合各区域法规要求(如GDPR、PDPA、拉美数据法等),推动策略制定与落地执行; ○ 支持数据本地化、跨境流转审计、国际隐私保护机制建设。 5. 全球安全运营能力建设 ○ 协同安全运营团队搭建覆盖多时区、多语言的全球运营体系(轻量SOC、安全工单系统等); ○ 搭建全球威胁情报适配与协同机制,支撑本地事件响应能力。 6. 跨团队协作与团队建设 ○ 与平台(集团安全产技)、业务、安全技术、安全合规、法律、海外运营等团队紧密协作; ○ 参与相关人才梯队建设,为国际安全团队注入全球化能力。 Strategic Execution & Capability Reuse ● Translate group-level global security strategies into actionable execution plans; ● Drive the migration, adaptation, and productization of Alibaba’s core security capabilities (Cloud Infrastrcure, Application and Data Security, etc.) for international business use. Global Security Infrastructure & Architecture ● Build baseline security architectures across markets, including access management, data protection, audit/logging, and threat detection; ● Support regional business security unification while respecting localized needs. Internationalization of Security Products ● Lead internationalization efforts for internal security tools: multi-language support, local deployment architecture, and regional compliance standards; ● Deliver modular, API-driven, and SaaS-compatible security components for overseas platforms. Compliance & Data Sovereignty ● Design and enforce compliance frameworks aligning with GDPR, PDPA, CCPA, and other regional data privacy regulations; ● Support data localization, cross-border flow auditing, and international privacy mechanism design. Security Operations & Threat Response ● Co-build regionalized security operations capabilities (SOC-lite models, incident response playbooks, multilingual ticketing systems); ● Establish globally coordinated threat intel and response mechanisms. Cross-Team & Talent Development ● Work closely with security engineering, platform, legal, compliance, and international operations teams; ● Mentor or hire security professionals with international capabilities and build the foundation of a globally distributed team.

更新于 2025-06-13杭州|北京
logo of alibaba
社招5年以上LAZADA

Team and Role Introduction The Assortment, Content & Ads Governance Team (ACAG team) is part of the Lazada’s Risk and Security. It is charged with the mission of developing a comprehensive strategy for Lazada regarding assortment and content to foster a healthy and safe e-commerce environment for our eCommerce ecosystem. 商品分类、内容及广告治理团队(ACAG团队)隶属于Lazada风险与安全部门,其核心使命是为Lazada制定全面的商品分类与内容治理战略,以维护电商生态系统的健康与安全环境。 The role is responsible for the development and execution of strategic initiatives aimed at ensuring our platform's stipulated policies, particularly in assortment compliance and governance, brand governance, are not abused by platform users. You will have access to analytical tools to develop and implement strategies and solutions using data-driven methodologies to reduce inefficient traffic and money allocation by governing assortments with traffic scams, quality issues, regulatory compliance issues, and brand Intellectual Property (IP) rights infringement. 该职位负责制定与执行战略举措,确保平台政策(尤其是商品合规治理、品牌治理相关规则)不被用户滥用。您将利用数据分析工具,通过数据驱动方法开发策略与解决方案,治理涉及流量欺诈、商品质量问题、合规风险及品牌知识产权侵权的商品分类问题,从而减少低效流量与资金分配。 Responsibilities Develop a deep understanding of the eCommerce customer and seller journey, including registration and onboarding, product listing, order placement, payment, user interactions, returns and refunds, user reports and feedback, etc. Develop subject matter expertise on eCommerce platform operation and governance, where rules, strategies, and enforcements are effectively established to ensure users are compliant with platform policies. Lead cross-functional efforts to enhance platform policies and operational mechanisms, fostering a collaborative environment to support ongoing strategy refinement. Work with large data sets to analyze patterns, trends, and modus operandi of platform operation and governance issues (as well as merchants who perpetrate these issues). Make data-driven recommendations on prioritization of controls for platform governance and product compliance. Collaborate with PD, Tech, and Algo counterparts to build machine learning models and rules to detect assortment and user related operation and governance issues on the platform. Operate the risk engine, including the creation and continuous evaluation of rules to prevent and detect platform operation and governance issues. Capture and communicate findings with internal and external stakeholders through dashboards, periodic reports, and presentations. 岗位职责 1/ 深度洞察电商客户与卖家的全流程体验,涵盖注册入驻、商品上架、订单生成、支付、用户互动、退货退款、用户反馈等环节。 2/ 建立电商平台运营与治理领域的专业知识体系,确保规则、策略及执行机制有效落地,推动用户遵守平台政策。 3/ 主导跨职能协作,持续完善平台政策与运营机制,营造协作环境以支持策略迭代。 4/ 基于海量数据集分析平台运营与治理问题的模式、趋势及商家违规手法。 5/ 通过数据分析提出平台治理与商品合规的管控优先级建议。 6/ 协同产品(PD)、技术(Tech)及算法(Algo)团队,构建机器学习模型与规则,检测平台商品分类及用户相关的运营治理问题。 7/ 负责风险引擎的日常运营,包括规则创建与持续评估,以预防和识别平台治理漏洞。 8/ 通过仪表盘、定期报告及演示汇报,向内外部利益相关方清晰传递分析结论与治理成果。

更新于 2025-07-03杭州
logo of alibaba
社招4年以上LAZADA

• Monitor transactional data to identify suspicious patterns, emerging fraud trends and anomalies. • Design and maintain fraud detection dashboards, models, and rules using statistical and machine learning techniques. • Collaborate with product, engineering, and compliance teams to implement and fine-tune fraud detection. • Conduct root cause analyses on fraud incidents and provide actionable insights. • Develop reporting frameworks to communicate fraud trends, risk metrics, and investigation outcomes to stakeholders. • Continuously refine detection logic based on feedback and fraud evolution. • Support incident response teams in investigating and responding to fraud alerts. • Stay current with industry best practices and evolving fraud tactics.

更新于 2025-10-10马尼拉