Job Responsibilities

1. Take charge of providing support for all ESMC activities related to Corporate Information Security (CIS) at the local level. 2. Assist in important business deals by reviewing and creating contracts to facilitate relationships with significant partners, suppliers, and stakeholders. 3. Collaborate with external legal advisors to advance the organizational goals and positions related to Corporate Information Security (CIS) management. 4. Assist in ensuring compliance with various Information Security regulations, including export control, corporate governance, labor & employment. 5. Establish a data protection platform and mechanism for ESMC and create a dedicated working team to ensure successful implementation of data protection measures. 6. Create and execute strategies and programs to safeguard data from unauthorized access or disclosure. 7. Perform daily tasks related to data protection, such as resolving data protection issues, conducting external/internal audits, providing training, promoting data protection, and carrying out compliance checks. 8. Collaborate with HR, Legal, and IT to execute local first-line investigations and consequence management for data protection in accordance with corporate data protection policies. 9. Collaborate with the physical security team, including security guards, to implement TSMC's PIP (Proprietary Information Protection) policy. 10. Manage and work closely with in-house legal counsels to drive the organizational goals of corporate information security. Serve as an internal liaison within ESMC and with TSMC located in Amsterdam and Taiwan. 11. Develop and ensure compliance with information security policies, procedures, standards, and guidelines based on industry standards, such as ISO27001 and ISO15408, as well as business requirements. 12. Design solutions for secure boundaries. 13. Take charge of programs aimed at improving data protection and physical security measures. 14. Provide consultation to internal teams by evaluating their information security challenges, concerns, and potential threats, and recommending cost-effective security improvement solutions. 15. Create and execute training programs, workshops, and promotional events to enhance awareness of information security. 16. Perform an evaluation to ensure that information security policies, procedures, and practices are followed correctly. 17. Investigate cases of data protection violations and manage the consequences.

Job Requirements

1. A good understanding and knowledge of data protection regulations, policies, and their implementations. 2. A strong understanding of information security, along with proficient skills in risk assessment and project management. Holding relevant information security certifications such as CISSP, CISA, CISM, and CIPP would be an added advantage. 3. Excellent communication and change management skills, with the ability to collaborate with internal and external partners across various departments. 4. Capable of analyzing information with attention to detail while keeping the overall goal in mind. Collaborative and motivated to work independently. 5. Able to make sound decisions independently, take initiative, learn new concepts quickly, and respond promptly to tasks. Must have experience: 1. A minimum of three years of experience in managing teams. 2. A minimum of five years of professional experience in the information security industry. 3. A minimum of seven years of professional experience in a European work environment. Language Skills: 1. Proficiency in both German and English languages with strong communication skills in both. 2. Conversational Mandarin language skills would be a plus.

Required Languages

German, Mandarin, English