IT ISO 20000 & ISO 27001 体系审核员 （CCAA）

Overview / Purpose of the position

职位目标

• To conduct Ｏn-site assessments against the requirements of relevant standards or specifications.

• 根据认证认可准则，按照相关法规及国际标准对客户质量管理体系及产品进行符合性审核。

• To provide expertise, produce surveillance and initial assessment reports and make recommendations for certification decisions.

• 撰写审核报告，对于证书的发放提出专业意见。

• To promote the BSI product offering and solutions to our clients with the view of improving their business performance, managing risk.

• 向客户提供BSI专业的解决方案以提高客户业绩， 防范企业运营风险。

Responsibilities & Accountabilities

工作职责

• Undertake management system assessments in accordance with BSI requirements.

• 依据 BSI要求开展ISO/IEC 27001等系列相关信息安全的标准或ISO/IEC 20000信息技术服务管理体系认证的系统审核程序。

• Prepare assessment reports and deliver findings to clients to ensure client understanding of the assessment decision and clear direction to particular items of corrective action where appropriate.

• 撰写审核报告，沟通审核发现，并确保客户理解审核结果和改进的方向，从而使客户按照要求进行纠正措施的改进。

• Recommend the issue, re-issue or withdrawal of certificates, and report recommendations in accordance with BSI policy, procedures and prescribed time frame.

• 依据 BSI政策、流程和规定期限，对证书签发， 重签发或撤销提出推荐的建议。

• Lead assessment teams as required ensuring that team members are adequately briefed so that quality of service is maintained and that effective working relationships are sustained both with Clients and within the team.

• 领导和指导审核组，保持优质的服务质量，在客户和团队内保持良好的工作关系。

• Establish and develop an effective partnership, which secures the commercial relationship and encourages opportunities for business development and increased client satisfaction with clients in your portfolio.

• 与部门团队密切合作，从而维系与客户的良好合作关系和发掘新的业务机会，提升现有客户的满意度。

• Provide accurate and prompt information to support services, working closely with them to ensure that client records are up to date and complete and that all other internal information requirements are met.

• 与部门团队密切合作，及时准确反馈重要信息，确保客户资料和记录的更新和完整，满足公司内部合规及相关审核的要求。

• Plan/schedule workloads to make best use of own time and maximize revenue-earning activity.

• 充分运用时间，合理安排工作量，达到卓越运营。

• Maintain and develop assessment skills and technical and management system standards knowledge.

• 不断提升审核技能和学习质量管理体系标准相关知识。

• Provide technical support to clients through business development, sales and customer service staff.

• 协助业务开发、销售和客服人员对客户进行技术支持。

Person Specification

任职资格

• Bachelor degree or above; Degree in IT, Information Security or Computer Science related

• 本科及以上学历; 信息安全或计算机相关专业

• An professional with qualification of ISO 27001& ISO 20000 /GBT 24405&ISO 9000 or ISO22301

• 具备ISO 27001& ISO 20000 /GBT 24405&ISO 9000 或 ISO22301专业认证， (CCAA 国家注册审核员资质；ISMS/ITMS 审核员资格)

• Good verbal and written communication skills in English

• 优秀的英文书面和口头表达能力

• Minimum 3 years IT working experience or software, data center & cloud computing background preferred

• 3年及以上IT从业经验或软件、数据中心和云计算工作背景优先

• Commercial understanding of compliance industry, minimum 2 years quality system management work experience is preferred

• 了解审核行业， 至少二年的质量管理工作经验为佳少

• Knowledge of business processes and application of quality management standards

• 熟悉了解业务流程和质量管理体系的运用

• Be self-motivated, flexible, and have excellent time management/planning skills, attention to details

• 办事积极主动， 灵活变通，有良好的时间管理和组织规划能力，认真仔细

• Can accept business trips and audit work by client Ｏnsite

• 能够出差去客户公司进行审核工作职责

• Good public speaking and business development skill will be considered advantageous

• 有良好沟通能力和业务开发技巧者优先考虑