Network and Data Compliance Specialist

About this task

岗位职责：
1. 负责海外锂电工厂IT系统、工业网络、生产及供应链数据的安全与合规管理，落地欧盟CRA、NIS2、GDPR等核心法规，规避跨境网络与数据安全风险，保障工厂数字化、工业化系统合规运营。
2. 持续研读欧盟网络安全、数据合规法规及行业细则，结合锂电工厂工控系统、设备联网、跨境数据传输等业务场景，协助搭建网络安全与数据合规管理体系，输出合规制度、操作规范及管控清单。
3. 协助完成工厂IT系统、工控设备、物联网设施、网络架构的合规核查与整改，覆盖设备网络弹性、漏洞管理、数据全生命周期管控，满足欧盟相关法规要求。
4. 常态化开展合规自查、内部审计，配合海外监管抽查、第三方审计及客户稽核，整理合规台账、整改报告等资料，支撑合规认证与常态化监管工作。
5. 协助建立网络安全、数据泄露应急响应机制，按法规时限完成事件上报、处置、溯源复盘，优化应急预案与管控流程，防范合规风险复发。
6. 面向工厂各岗位开展常态化合规培训，普及欧盟CRA、NIS2、GDPR核心要求，提升全员合规意识，推动合规制度落地执行。

任职要求：
1. 本科及以上学历，电气工程、网络工程、信息安全、计算机、软件工程等相关专业。
2. 熟悉工厂网络架构、防火墙、VPN等网络设备，精通服务器、操作系统、数据库、MES/ERP生产系统、物联网平台的安全管控机制。
3. 熟练掌握欧盟CRA、NIS2、GDPR核心法规及配套标准，了解欧盟人工智能法案分级管控规则及高风险AI系统合规要求。
4. 持有CISP、CISSP、ISO27001、ISO27701等安全合规相关证书者优先。
5. 具备良好的英文听说读写能力，可独立编写技术文件、对接处理合规认证相关沟通工作。

薪资：30-50k·14薪
工作地点：匈牙利

Responsibilities:
1. Be responsible for security and compliance management of IT systems, industrial networks, production data, and supply chain data at an overseas lithium battery factory; implement core EU regulations such as CRA, NIS2, and GDPR; mitigate cross-border network and data security risks; and ensure compliant operation of the factory's digital and industrial systems.
2. Continuously study EU cybersecurity and data compliance regulations and industry rules; based on scenarios such as industrial control systems, connected equipment, and cross-border data transfers in lithium battery factories, assist in building a cybersecurity and data compliance management system, and produce compliance policies, operating procedures, and control checklists.
3. Assist in compliance inspections and remediation for factory IT systems, industrial control equipment, IoT facilities, and network architecture, covering device network resilience, vulnerability management, and full-lifecycle data controls to meet relevant EU regulatory requirements.
4. Conduct regular compliance self-inspections and internal audits; support overseas regulatory inspections, third-party audits, and customer audits; organize compliance ledgers, remediation reports, and related materials; and support compliance certification and ongoing regulatory work.
5. Assist in establishing cybersecurity and data breach incident response mechanisms; complete incident reporting, handling, tracing, and post-incident reviews within regulatory timelines; optimize emergency plans and control processes; and prevent recurrence of compliance risks.
6. Deliver regular compliance training to factory roles, communicate key requirements of EU CRA, NIS2, and GDPR, improve compliance awareness, and promote implementation of compliance policies.

Requirements:
1. Bachelor's degree or above in Electrical Engineering, Network Engineering, Information Security, Computer Science, Software Engineering, or related fields.
2. Familiar with factory network architecture, firewalls, VPNs, and other network devices; proficient in security control mechanisms for servers, operating systems, databases, MES/ERP production systems, and IoT platforms.
3. Strong understanding of core EU regulations and supporting standards including CRA, NIS2, and GDPR; familiarity with the EU AI Act's risk classification rules and compliance requirements for high-risk AI systems.
4. Candidates with security or compliance certifications such as CISP, CISSP, ISO27001, or ISO27701 are preferred.
5. Good English listening, speaking, reading, and writing skills; able to independently prepare technical documents and communicate on compliance certification matters.

Salary: 30-50k · 14 salaries
Location: Hungary