Job Description

1. Take charge of providing support for all ESMC activities related to Corporate Information Security (CIS) at the local level.
2. Assist in important business deals by reviewing and creating contracts to facilitate relationships with significant partners, suppliers, and stakeholders.
3. Collaborate with external legal advisors to advance the organizational goals and positions related to Corporate Information Security (CIS) management.
4. Assist in ensuring compliance with various Information Security regulations, including export control, corporate governance, labor & employment.
5. Establish a data protection platform and mechanism for ESMC and create a dedicated working team to ensure successful implementation of data protection measures.
6. Create and execute strategies and programs to safeguard data from unauthorized access or disclosure.
7. Perform daily tasks related to data protection, such as resolving data protection issues, conducting external/internal audits, providing training, promoting data protection, and carrying out compliance checks.
8. Collaborate with HR, Legal, and IT to execute local first-line investigations and consequence management for data protection in accordance with corporate data protection policies.
9. Collaborate with the physical security team, including security guards, to implement TSMC's PIP (Proprietary Information Protection) policy.
10. Manage and work closely with in-house legal counsels to drive the organizational goals of corporate information security. Serve as an internal liaison within ESMC and with TSMC located in Amsterdam and Taiwan.
11. Develop and ensure compliance with information security policies, procedures, standards, and guidelines based on industry standards, such as ISO27001 and ISO15408, as well as business requirements.
12. Design solutions for secure boundaries.
13. Take charge of programs aimed at improving data protection and physical security measures.
14. Provide consultation to internal teams by evaluating their information security challenges, concerns, and potential threats, and recommending cost-effective security improvement solutions.
15. Create and execute training programs, workshops, and promotional events to enhance awareness of information security.
16. Perform an evaluation to ensure that information security policies, procedures, and practices are followed correctly.
17. Investigate cases of data protection violations and manage the consequences.

Job Tags

Similar Jobs