Key responsibilities:

• Assess current technology trends, develop the IT roadmap and provide strategic IT solutions to support the company’s business development and operational needs.
• Oversee IT operations and governance to ensure that IT services meet the company’s business requirements and service standards.
• Plan, execute and track IT projects using standard project management methodologies to ensure timely and effective project delivery.
• Develop and enforce IT policies, procedures, governance frameworks and security standards in line with the company’s requirements and industry best practices.
• Manage day-to-day IT service performance and technical issues, and oversee IT infrastructure, applications, services and data management.
• Take responsibility for local information security management and perform the relevant responsibilities required for designation as the company’s Chief Information Security Officer (CISO).
• Develop and implement information security policies, procedures and internal control standards in alignment with headquarters’ requirements and applicable Korean laws and regulations.
• Conduct information security risk assessments, identify vulnerabilities and establish appropriate mitigation and remediation plans.
• Manage cybersecurity incidents, including incident response, investigation, internal escalation, reporting and follow-up improvement.
• Oversee access control, account and authority management, data protection, endpoint security, network security and third-party security risks.
• Support internal and external security audits, regulatory inspections and information security reporting to management and headquarters.
• Collaborate with different departments to understand business requirements and develop appropriate technical solutions.
• Optimize IT processes to improve operational efficiency, system performance and end-user experience, and support the company in reducing operational costs.
• Coordinate with internal teams, outsourcing partners and third parties to provide end-user IT services, including L1 support for applications, computers, printers, mobile devices, IP phones and conference systems.
• Manage IT vendors and outsourcing partners through service-level agreements and periodic performance reviews to ensure service quality.
• Manage the full lifecycle and inventory of IT assets, including the purchase, installation, maintenance and disposal of hardware, software and licenses.
• Manage email and domain account creation, cancellation and authority settings, and maintain accurate IT asset and inventory records.
• Provide IT and information security training for new employees and support technical knowledge improvement across the organization.
• Support IT projects and other ad-hoc tasks as required.
• Manage the operation and maintenance of business systems, including DMS and CRM, in cooperation with headquarters.
• Respond to IT and information security requirements from relevant Korean regulatory authorities and other related institutions.

Job Requirements:

• Bachelor’s degree or above in Information Technology, Information Security, Computer Science, Automation or a related field.
• At least 5 years of experience in IT service operations, infrastructure, applications or related IT functions in Korea.
• At least 3 years of relevant experience in information security, cybersecurity, IT risk management or security compliance.
• Must meet the statutory qualification requirements for designation as a Chief Information Security Officer (CISO) under applicable Korean law.
• Good understanding of general IT service and solution delivery processes, with relevant hands-on experience.
• Solid IT project management skills and experience serving as an IT project manager, preferably for new office or new site launch projects.
• Hands-on experience in information security policy development, risk assessment, incident response, access control, data protection and security audit management.
• Good knowledge of IT governance, information security compliance and applicable Korean information security and personal data protection requirements.
• Knowledge of enterprise IT infrastructure, network security, endpoint security and application management.
• Experience in the automotive industry or a multinational company is preferred.
• Experience with ISMS/ISMS-P, ISO/IEC 27001, information security audits or security governance is preferred.
• Relevant information security certifications, such as CISSP, CISA, CISM, ISMS-P Auditor or Information Security Engineer, are preferred.
• Strong communication and interpersonal skills, with the ability to understand and coordinate with different business functions, including Finance and Supply Chain.
• Self-motivated and a quick learner, with excellent teamwork and influencing skills.
• Good written and verbal communication skills in English or Chinese.