信息安全&数据安全研发工程师

职位描述

职位描述/Position Description：

负责整车信息安全&数据安全相关的开发及管理工作。

Responsible for the development and management of vehicle cyber security related work & Data Security related work.

主要职责/Major Responsibility：

 负责创建及维护整车网络安全开发计划，进行全生命周期的车辆网络安全管理工作，跟踪项目进度，协调资源，确保项目相关的网络安全活动按计划顺利开展，包括：

Responsible for creating and maintaining a vehicle cyber security development plan, conducting full lifecycle vehicle cyber security management, tracking project progress, coordinating resources, and ensuring that project related cyber security activities are carried out smoothly according to the plan, including:

 跟踪概念开发阶段的任务进度，汇总检查阶段输出物，确认网络安全目标及需求

Track the progress of tasks during the concept development phase, summarize and inspect the outputs of the phase, and confirm cyber security goals and requirements

 产品开发阶段的网络安全任务发布及跟踪，输出物的汇总确认

Release and tracking of cyber security tasks during the product development phase, and confirmation of the summary of output materials

 网络安全测试阶段，网络安全目标的验证确认，包括准备测试环境，测试条件，确认测试结果

During the cyber security testing phase, the verification and confirmation of cyber security objectives include preparing the testing environment, testing conditions, and confirming test results

 配合项目网络安全评估人员完成项目的评估工作

Collaborate with project cyber security assessors to complete the project evaluation work

 支持项目运维阶段的网络安全工作

Support cyber security work during the project operation and maintenance phase

 定期收集汽车行业信息安全发展趋势及国家相关的产品标准、法规。

Regularly collect the development trends of vehicle cyber security and relevant national product standards and regulations.

 负责创建及维护整车数据安全开发计划，进行全生命周期的车辆数据安全管理工作，跟踪项目进度，协调资源，确保项目相关的数据安全活动按计划顺利开展

Responsible for creating and maintaining a vehicle data security development plan, conducting vehicle data security management throughout the entire lifecycle, tracking project progress, coordinating resources, and ensuring that project-related data security activities are carried out smoothly as planned:

 具备设计符合目标市场的数据出境方案的能力，同步满足中国《汽车数据安全管理若干规定》及欧盟GDPR等国际法规要求

Capable of designing data export solutions that meet the needs of target markets, while complying with international regulations such as China's "Several Provisions on the Administration of Automobile Data Security" and the EU's GDPR

 依据《汽车数据分类分级指南》具备对汽车不同类型数据划分传输优先级，实施差异化保护策略的能力

According to the "Guidelines for Classification and Grading of Automotive Data", it has the ability to prioritize the transmission of different types of automotive data and implement differentiated protection strategies

 支持智能化团队进行汽车数据/隐私安全技术规划和日常技术创新研究/开发及管理工作

Support intelligent teams in automotive data/privacy security technology planning and daily technological innovation research/development and management

 完成公司其他与产品研发相关的其他工作。

To fulfill the other activities associated with engineering.

任职要求

任职条件/Qualification：

 计算机、信息化、网络安全、数据安全、电子信息相关专业，全日制本科及以上学历；

Major in computer science, information technology, network security, data security, electronic information or related fields, with a full-time bachelor's degree or above

 具有汽车产品或制造行业相关工作经历3年以上；

At least 3 years work experiences of Automobile product or manufacturing;

 了解ISO 21434，UN-R155等车辆网络安全相关的法规标准，有相关项目经验优先

Understand regulations and standards related to vehicle cyber security, such as ISO 21434 and UN-R155, and have relevant project experience is preferred

 掌握密码学等网络信息安全领域基本技术原理，熟悉ISO 21434、WP.29 R155、GDPR、GB 44495汽车整车信息安全技术要求、GB/T 44464等国际国内车辆网络安全/数据安全法规标准及流程体系；

Master the basic technical principles of cryptography and other network information security fields, and be familiar with ISO 21434, WP.29 R155, GDPR, GB 44495 automotive vehicle information security technical requirements, GB/T 44464 and other international and domestic vehicle network security/data security regulations, standards and process systems

 熟悉海外汽车数据安全监管制度、具有海外汽车数据跨境处理经验优先考虑。

Those who are familiar with overseas automotive data security supervision systems and have experience in cross-border processing of overseas automotive data are preferred.

 熟悉整车电子电器架构、熟悉Tbox数据传输、云服务器及数据管理

Familiar with the electronic and electrical architecture of the entire vehicle, familiar with Tbox data transmission, cloud servers, and data management

 沟通协调能力较强和抗压能力；

Good communication and coordination skills , can work under pressure;

 英文CET4级以上，同时懂日语优先。

English CET4 and above，Japanese speaker is preferred.