Úta Security Officer

Site Name: China - Shanghai - Pudong - New Bund International Square Posted Date: Feb 10 2023 Data Security Officer (SECURITY) is responsible for ensuring GSK China meets its obligations under DSL, and cross-border data transfer laws. SECURITY provides expert advice, guidance and direction and support the necessary standards and controls to enable GSK China, including its employees and relevant third parties, to manage data & Security control and comply with DSL obligations. DSO oversees all ongoing activities related to the development, implementation and maintenance of the GSK China data security policies and programs in accordance with applicable laws, regulations and GSK Tech policies and provide strategic direction regarding existing and emerging data security laws. To establish a culture of data security and Security protection within GSK China, DSO will need to work collaboratively with key senior stakeholders across the business and governance functions and will be accountable for keeping executives appraised of data security risks and issues. Reporting to China digital & tech officer, the role holder is the designated DSO within jurisdiction in China and is responsible for carrying out the following tasks: Cooperating and liaising with the data security regulatory authority and acting as the contact point for government authorities in related to data security assessment; Informing, advising, and enforcing the business and its employees of their data security compliance obligations; Providing expert guidance, oversight and challenge on all aspects of data security and system risk strategy Reviewing and advising on Data Security Impact Assessments (DPIAs) and monitoring system performance of mitigations, where necessary; Organizing data security publicity and awareness training, risk assessment and reporting Developing and implementing data Security plan and data security incidents contingency plans; Advising on, and providing the business with support, to ensure the necessary safeguards and controls are in place to ensure compliance with requirements for international data transfers by identifying all circumstances in which personal data is transferred outside of China Providing incident management advice and/or support as needed and ensuring that data & Security incidents and breaches are responded to and managed effectively with data subjects and that the relevant authorities are informed within necessary timeframes. Why you? Basic Qualifications: We are looking for professionals with these required skills to achieve our goals: Bachelor degree or above, over 8 years’ experience and track-record in data security and legal compliance with solid digital & tech knowledge; Relevant data Security or info security certification such as CIPP (preferred); Solid knowledge of Data Security Law and cross-border data transfer regulation of China; Chinese citizen Familiar with data life cycle management, data security SOP and assessment; Corporate experience and legal & Compliance experience is highly preferred; Detail-focused approach needed to recommend and implement strategic improvements with strong ability to priorities; Proven ability to establish and maintain a high degree of confidentiality, respect, trust and credibility at all levels; Experience in communicating, interacting and maintaining good working relationships with supervisory authorities; Strong written and verbal communication skills; Fluent in both written and spoken English/Mandarin; Ability to develop and deliver training materials; Well-developed and professional interpersonal skills; ability to interact effectively with people at all organizational levels; Ability to work unsupervised, exercise leadership and influence change; Ability to use independent judgement and discretion when making the majority of decisions; The role requires a strong ability to: Adapt workstyle to meet complex and varied workloads Maintain knowledge of GSK data security operations and policies Obtain support of senior executives, some of whom will have competing priorities Think independently and provide advice that strikes an appropriate balance between management and mitigation of data & Security risk, business efficacy, and the potential risks and impacts for data subjects See the “bigger picture” and understand the interrelationships between a range of complex issues and the impact of those issues from a regulatory, financial and reputational perspective Adapt communication style and content to appropriately address management level of the audience Distil and communicate complex ideas in an understandable manner assisting the business to make difficult decisions. Why GSK? Uniting science, technology and talent to get ahead of disease together GSK is a global biopharma company with a special purpose – to unite science, technology and talent to get ahead of disease together – so we can positively impact the health of billions of people and deliver stronger, more sustainable shareholder returns – as an organization where people can thrive. Getting ahead means preventing disease as well as treating it, and we aim to impact the health of 2.5 billion people around the world in the next 10 years. Our success absolutely depends on our people. While getting ahead of disease together is about our ambition for patients and shareholders, it’s also about making GSK a place where people can thrive. We want GSK to be a place where people feel inspired, encouraged and challenged to be the best they can be. A place where they can be themselves – feeling welcome, valued and included. Where they can keep growing and look after their wellbeing. So, if you share our ambition, join us at this exciting moment in our journey to get Ahead Together. *LI-GSK GSK is a global biopharma company with a special purpose – to unite science, technology and talent to get ahead of disease together – so we can positively impact the health of billions of people and deliver stronger, more sustainable shareholder returns – as an organisation where people can thrive. Getting ahead means preventing disease as well as treating it, and we aim to impact the health of 2.5 billion people around the world in the next 10 years. Our success absolutely depends on our people. While getting ahead of disease together is about our ambition for patients and shareholders, it’s also about making GSK a place where people can thrive. We want GSK to be a workplace where everyone can feel a sense of belonging and thrive as set out in our Equal and Inclusive Treatment of Employees policy. We’re committed to being more proactive at all levels so that our workforce reflects the communities we work and hire in, and our GSK leadership reflects our GSK workforce. Important notice to Employment businesses/ Agencies GSK does not accept referrals from employment businesses and/or employment agencies in respect of the vacancies posted on this site. All employment businesses/agencies are required to contact GSK's commercial and general procurement/human resources department to obtain prior written authorization before referring any candidates to GSK. The obtaining of prior written authorization is a condition precedent to any agreement (verbal or written) between the employment business/ agency and GSK. In the absence of such written authorization being obtained any actions undertaken by the employment business/agency shall be deemed to have been performed without the consent or contractual agreement of GSK. GSK shall therefore not be liable for any fees arising from such actions or any fees arising from any referrals by employment businesses/agencies in respect of the vacancies posted on this site. 致候选人的重要提示： GSK招聘团队只会使用 @gsk.com 后缀的邮箱与您联系。若您收到任何声称来自GSK邀请您面试或请您提供任何个人信息的邮件，我们建议您留意发件人的邮箱地址，并谨慎回复。若您不确定您所收到的邮件是否来自GSK，请您通过[email protected]联系我们。